Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2024-28787

IBM Security Verify Access information disclosure

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
ibm

Description

IBM Security Verify Access 10.0.0 through 10.0.7 and IBM Application Gateway 20.01 through 24.03 could allow a remote attacker to obtain highly sensitive private information or cause a denial of service using a specially crafted HTTP request. IBM X-Force ID: 286584.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM Security Verify Access Container

Default version status: unaffected

  • 10.0.0 to ≤ 10.0.7affected

IBM Security Verify Access Appliance

Default version status: unaffected

  • 10.0.0 to ≤ 10.0.7affected

IBM Application Gateway

Default version status: unaffected

  • 20.01 to ≤ 24.03affected

References