PT-2023-12341

Name of the Vulnerable Software and Affected Versions IBM Security Verify Privilege On-Premises version 11.5 Description The issue allows a user to obtain version number information using a specially crafted HTTP request, which could be used in further attacks against the system. Recommendations...

PT-2023-12136

Name of the Vulnerable Software and Affected Versions IBM Security Verify Privilege On-Premise version 11.5 Description The issue is due to improper input validation, which could allow an authenticated user to obtain sensitive information or perform unauthorized actions. Recommendations For IBM...

PT-2023-14385 · Ibm · Ibm Security Verify Privilege On-Premises

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Privilege On-Premises version 11.5 Description: A remote attacker could obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks...

PT-2023-12694 · Ibm · Ibm Security Verify Privilege On-Premises

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Privilege On-Premises version 11.5 Description: The issue could disclose sensitive information to an attacker due to the transmission of data in clear text. Recommendations: For IBM Security Verify Privilege On-Premises...

PT-2023-12691 · Ibm · Ibm Security Verify Privilege On-Premises

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Privilege On-Premises version 11.5 Description: IBM Security Verify Privilege On-Premises could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request...

PT-2023-7012 · Ibm · Ibm Security Verify Privilege On-Premises

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Privilege On-Premises version 11.5 Description: The issue is related to the lack of data encryption measures in IBM Security Verify Privilege On-Premises, which could allow a remote attacker to obtain sensitive information...

PT-2023-12692

Name of the Vulnerable Software and Affected Versions IBM Security Verify Privilege On-Premises version 11.5 Description The issue allows an attacker to spoof a trusted entity due to improperly validating certificates. Recommendations For IBM Security Verify Privilege On-Premises version 11.5,...

CVE-2023-33836: Use of Hard-coded Credentials

IBM Security Verify Governance 10.0 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 256016...

CVE-2023-35018 IBM Security Verify Governance file upload

IBM Security Verify Governance 10.0 could allow a privileged use to upload arbitrary files due to improper file validation. IBM X-Force ID: 259382...

CVE-2023-35018 IBM Security Verify Governance file upload

IBM Security Verify Governance 10.0 could allow a privileged use to upload arbitrary files due to improper file validation. IBM X-Force ID: 259382...

CVE-2023-35018

IBM Security Verify Governance (Identity Manager virtual appliance) is affected by CVE-2023-35018, where a privileged user could upload arbitrary files due to improper file validation. The issue affects version pre-10.0.2 FP0 in the Identity Manager virtual appliance component. IBM’s bulletin als...

CVE-2023-35013

CVE-2023-35013 affects IBM Security Verify Governance Identity Manager virtual appliance component, prior to 10.0.2 FP0000. The issue is an information disclosure risk where a local privileged user could obtain sensitive information from the source code. Remediation provided by IBM: upgrade to 10...

CVE-2023-35013 IBM Security Verify Governance information disclosure

IBM Security Verify Governance 10.0, Identity Manager could allow a local privileged user to obtain sensitive information from source code. IBM X-Force ID: 257769...

CVE-2023-35013 IBM Security Verify Governance information disclosure

IBM Security Verify Governance 10.0, Identity Manager could allow a local privileged user to obtain sensitive information from source code. IBM X-Force ID: 257769...

CVE-2023-35018: Unrestricted Upload of File with Dangerous Type

IBM Security Verify Governance 10.0 could allow a privileged use to upload arbitrary files due to improper file validation. IBM X-Force ID: 259382...

CVE-2023-35013: Inclusion of Sensitive Information in Source Code

IBM Security Verify Governance 10.0, Identity Manager could allow a local privileged user to obtain sensitive information from source code. IBM X-Force ID: 257769...

IBM Security Verify Governance Code Issue Vulnerability

IBM Security Verify Governance is an intelligent identity access platform from International Business Machines IBM, Inc. provides organizations with a platform to analyze, define and control user access and access risk. A code issue vulnerability exists in IBM Security Verify Governance version...

PT-2023-25095 · Ibm · Ibm Security Verify Governance

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Governance version 10.0 Description: The issue allows a local privileged user to obtain sensitive information from source code. Recommendations: For IBM Security Verify Governance version 10.0, at the moment, there is no...

CVE-2022-43740

IBM Security Verify Access OIDC Provider could allow a remote user to cause a denial of service due to uncontrolled resource consumption. IBM X-Force ID: 238921...

CVE-2022-43868

IBM Security Verify Access OIDC Provider could disclose directory information that could aid attackers in further attacks against the system. IBM X-Force ID: 239445...