Description
IBM Security Verify Access 10.0.0 through 10.0.7 and IBM Application Gateway 20.01 through 24.03 could allow a remote attacker to obtain highly sensitive private information or cause a denial of service using a specially crafted HTTP request. IBM X-Force ID: 286584.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | Security Verify Access Container | 10.0.0 – ≤ 10.0.7 | — |
| IBM | Security Verify Access Appliance | 10.0.0 – ≤ 10.0.7 | — |
| IBM | Application Gateway | 20.01 – ≤ 24.03 | — |
Advisories 1
- WID-SEC-2024-0781 IBM Security Verify Access: Schwachstelle ermöglicht Denial of Service oder Offenlegung von Informationen BSI CERT-Bund (WID) · Apr 3, 2024
References
- https://www.ibm.com/support/pages/node/7145828 vendor-advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/286584 vdb-entry