Medium · 5.3 CVE-2022-43868 EUVD-2022-46838GHSA-jxhx-66x5-h397

IBM Security Verify Access information disclosure

Published Oct 14, 2023 · Updated Sep 16, 2024 · Assigned by ibm

Vendor: IBM Product: Security Verify Access

Description

IBM Security Verify Access OIDC Provider could disclose directory information that could aid attackers in further attacks against the system. IBM X-Force ID: 239445.

Affected products

Vendor	Product	Affected	Fixed
IBM	Security Verify Access	OIDC Provider	—

Advisories 1

WID-SEC-2023-2158 IBM Security Verify Access: Mehrere Schwachstellen BSI CERT-Bund (WID) · Aug 23, 2023

References

https://www.ibm.com/support/pages/node/7028513 vendor-advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/239445 vdb-entry