{"id":"CVE-2023-25927","state":"PUBLISHED","title":"IBM Security Verify Access denial of service","description":"IBM Security Verify Access 10.0.0, 10.0.1, 10.0.2, 10.0.3, 10.0.4, and 10.0.5 could allow an attacker to crash the webseald process using specially crafted HTTP requests resulting in loss of access to the system.  IBM X-Force ID:  247635.","publishedAt":"2023-05-12T17:38:51.966Z","updatedAt":"2025-11-03T21:47:28.686Z","severity":{"score":6.5,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","source":"ibm"},"assigner":"ibm","products":["IBM Security Verify Access"],"affected":[{"vendor":"IBM","product":"Security Verify Access","defaultStatus":"unaffected","versions":[{"version":"10.0.0, 10.0.1, 10.0.2, 10.0.3, 10.0.4, 10.0.5","status":"affected"}]}],"references":["https://https://www.ibm.com/support/pages/node/6989653","https://exchange.xforce.ibmcloud.com/vulnerabilities/247635","http://seclists.org/fulldisclosure/2024/Nov/1","http://seclists.org/fulldisclosure/2024/Nov/0"],"weaknesses":["CWE-20"],"ingestedAt":"2026-10-29T20:05:43.909Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/25xxx/CVE-2023-25927.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2023-25927","state":"PUBLISHED","datePublished":"2023-05-12T17:38:51.966Z","dateUpdated":"2025-11-03T21:47:28.686Z","assignerShortName":"ibm","assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateReserved":"2023-02-16T16:39:45.212Z"},"containers":{"cna":{"title":"IBM Security Verify Access denial of service","descriptions":[{"lang":"en","value":"IBM Security Verify Access 10.0.0, 10.0.1, 10.0.2, 10.0.3, 10.0.4, and 10.0.5 could allow an attacker to crash the webseald process using specially crafted HTTP requests resulting in loss of access to the system.  IBM X-Force ID:  247635."}],"affected":[{"vendor":"IBM","product":"Security Verify Access","defaultStatus":"unaffected","versions":[{"version":"10.0.0, 10.0.1, 10.0.2, 10.0.3, 10.0.4, 10.0.5","status":"affected"}]}],"references":[{"url":"https://https://www.ibm.com/support/pages/node/6989653","tags":["vendor-advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/247635","tags":["vdb-entry"]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-20","description":"CWE-20 Improper Input Validation","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"ibm","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateUpdated":"2023-05-12T17:38:51.966Z"},"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://https://www.ibm.com/support/pages/node/6989653","tags":["vendor-advisory","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/247635","tags":["vdb-entry","x_transferred"]},{"url":"http://seclists.org/fulldisclosure/2024/Nov/1"},{"url":"http://seclists.org/fulldisclosure/2024/Nov/0"}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2025-11-03T21:47:28.686Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-01-23T20:34:37.200739Z","id":"CVE-2023-25927","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-01-23T20:35:20.324Z"}}]}}}