Security Verify Access Security Vulnerabilities and Issues — Security Verify Access CVE List

Lucene search

IbmSecurity Verify Access

4 matches found

CVE•added 2024/04/10 4:15 p.m.•64 views

CVE-2024-31874

IBM Security Verify Access Appliance 10.0.0 through 10.0.7 uses uninitialized variables when deploying that could allow a local user to cause a denial of service. IBM X-Force ID: 287318.

6.2CVSS6AI score0.00022EPSS

CVE•added 2024/04/10 4:15 p.m.•60 views

CVE-2024-31872

IBM Security Verify Access Appliance 10.0.0 through 10.0.7 could allow a malicious actor to conduct a man in the middle attack when deploying Open Source scripts due to missing certificate validation. IBM X-Force ID: 287316.

8.1CVSS7.1AI score0.00049EPSS

CVE•added 2024/04/10 4:15 p.m.•54 views

CVE-2024-31873

IBM Security Verify Access Appliance 10.0.0 through 10.0.7 contains hard-coded credentials which it uses for its own inbound authentication that could be obtained by a malicious actor. IBM X-Force ID: 287317.

7.5CVSS6.5AI score0.00047EPSS

CVE•added 2024/04/10 4:15 p.m.•44 views

CVE-2024-31871

IBM Security Verify Access Appliance 10.0.0 through 10.0.7 could allow a malicious actor to conduct a man in the middle attack when deploying Python scripts due to improper certificate validation. IBM X-Force ID: 287306.

8.1CVSS6.2AI score0.00049EPSS