Description
IBM Security Verify Identity Access Reverse Proxy in certain configurations may provide weaker than expected cryptographic validation of user supplied data.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | Verify Identity Access | 11.0.0 – ≤ 11.0.3 Interim Fix 001 | — |
| IBM | Security Verify Access | 10.0.0 – ≤ 10.0.9.2 Interim Fix 001 | — |
| IBM | Verify Identity Access Container | 11.0.0 – ≤ 11.0.3 Interim Fix 001 | — |
| IBM | Security Verify Access Container | 10.0.0 – ≤ 10.0.9.2 Interim Fix 001 | — |
References
- https://www.ibm.com/support/pages/node/7286188 vendor-advisory patch