Description
IBM Security Verify Access Appliance and Docker 10.0 through 10.0.8 could allow a remote attacker to enumerate usernames due to an observable response discrepancy of disabled accounts.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | Security Verify Access | 10.0 – ≤ 10.0.8 | — |
| IBM | Security Verify Access Docker | 10.0 – ≤ 10.0.8 | — |
Advisories 1
- WID-SEC-2025-1288 IBM Security Verify Access: Schwachstelle ermöglicht Offenlegung von Informationen BSI CERT-Bund (WID) · Jun 10, 2025
References
- https://www.ibm.com/support/pages/node/7236314 vendor-advisory patch