Description
IBM Verify Identity Access could allow an administrator to execute additional commands they are not entitled to due to improper validation of user supplied input.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | Verify Identity Access | 11.0.0 – ≤ 11.0.3 Interim Fix 001 | — |
| IBM | Security Verify Access | 10.0.0 – ≤ 10.0.9.2 Interim Fix 001 | — |
| IBM | Verify Identity Access Container | 11.0.0 – ≤ 11.0.3 Interim Fix 001 | — |
| IBM | Security Verify Access Container | 10.0.0 – ≤ 10.0.9.2 Interim Fix 001 | — |
References
- https://www.ibm.com/support/pages/node/7286188 vendor-advisory patch