Security Bulletin: IBM Db2 used by IBM Security Verify Governance has multiple vulnerabilities

Summary IBM Security Verify Governance ISVG uses IBM Db2 database. Information about security vulnerabilities affecting IBM Db2 has been published in security bulletins. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions...

Security Bulletin: Security vulnerabilities were found in IBM Verify Identity Access Digital Credentials (CVE-2025-48387, CVE-2025-5889)

Summary Security vulnerabilities were addressed in IBM Verify Identity Access Digital Credentials Vulnerability Details CVEID:CVE-2025-48387 DESCRIPTION: tar-fs provides filesystem bindings for tar-stream. Versions prior to 3.0.9, 2.1.3, and 1.16.5 have an issue where an extract can write outside...

Security Bulletin: Security vulnerabilities have been addressed in IBM Verify Identity Access OIDC Provider (CVE-2024-45337, CVE-2025-22869)

Summary Multiple security vulnerabilities have been addressed in IBM Verify Identity Access OIDC Provider. Vulnerability Details CVEID:CVE-2024-45337 DESCRIPTION: Applications and libraries which misuse connection.serverAuthenticate via callback field ServerConfig.PublicKeyCallback may be...

The vulnerability of the IBM Verify Identity Access Digital Credentials access control system lies in the absence of a reference to an active, allocated resource. This allows attackers to trigger a service failure.

The vulnerability of the IBM Verify Identity Access Digital Credentials access control system lies in the absence of a reference to an active, allocated resource. Exploiting this vulnerability could allow a malicious actor, operating remotely, to trigger a service failure using a specially create...

Security Bulletin: IBM Verify Identity Access is affected by a security vulnerability (CVE-2025-0163)

Summary IBM Verify Identity Access has addressed this vulnerability in an update. Vulnerability Details CVEID:CVE-2025-0163 DESCRIPTION: IBM Security Verify Access Appliance could allow a remote attacker to enumerate usernames due to an observable response discrepancy of disabled accounts...

CVE-2024-56342

IBM Verify Identity Access Digital Credentials 24.06 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system...

CVE-2024-56343

IBM Verify Identity Access Digital Credentials 24.06 could allow an authenticated user to crash the service with a specially crafted POST request...

CVE-2024-56343

IBM Verify Identity Access Digital Credentials 24.06 could allow an authenticated user to crash the service with a specially crafted POST request...

CVE-2024-56342

IBM Verify Identity Access Digital Credentials 24.06 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system...

CVE-2024-56343 IBM Verify Identity Access Digital Credentials denial of service

IBM Verify Identity Access Digital Credentials 24.06 could allow an authenticated user to crash the service with a specially crafted POST request...

CVE-2024-56343

CVE-2024-56343 affects IBM Verify Identity Access Digital Credentials 24.06. An authenticated user can crash the service by sending a specially crafted POST request, causing a denial-of-service (A: HIGH/availability impact as per IBM/NVD). The issue is documented across multiple feeds (IBM bullet...

CVE-2024-56343 IBM Verify Identity Access Digital Credentials denial of service

IBM Verify Identity Access Digital Credentials 24.06 could allow an authenticated user to crash the service with a specially crafted POST request...

CVE-2024-56342

CVE-2024-56342 affects IBM Verify Identity Access Digital Credentials 24.06. Affected component: the product’s detailed technical error messages leak sensitive information to remote attackers, enabling information disclosure. Impact is limited to information exposure (no integrity/availability im...

CVE-2024-56342 IBM Verify Identity Access Digital Credentials information disclosure

IBM Verify Identity Access Digital Credentials 24.06 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system...

CVE-2024-56342 IBM Verify Identity Access Digital Credentials information disclosure

IBM Verify Identity Access Digital Credentials 24.06 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system...

CVE-2024-56343: Missing Reference to Active Allocated Resource

IBM Verify Identity Access Digital Credentials 24.06 could allow an authenticated user to crash the service with a specially crafted POST request...

CVE-2024-56342: Generation of Error Message Containing Sensitive Information

IBM Verify Identity Access Digital Credentials 24.06 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system...

Security Bulletin: Security vulnerabilities were discovered in IBM Verify Identity Access Digital Credentials (CVE-2024-56342, CVE-2024-56343)

Summary Security vulnerabilities were addressed in IBM Verify Identity Access Digital Credentials. Vulnerability Details CVEID:CVE-2024-56342 DESCRIPTION: IBM Verify Identity Access Digital Credentials could allow a remote attacker to obtain sensitive information when a detailed technical error...

PT-2025-23998 · Ibm · Ibm Verify Identity Access Digital Credentials

Name of the Vulnerable Software and Affected Versions: IBM Verify Identity Access Digital Credentials version 24.06 Description: The issue allows an authenticated user to crash the service by sending a specially crafted POST request. This could potentially lead to a denial-of-service condition...

PT-2025-23997 · Ibm · Ibm Verify Identity Access Digital Credentials

Name of the Vulnerable Software and Affected Versions: IBM Verify Identity Access Digital Credentials version 24.06 Description: The issue allows a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in...