| Package | Affected versions | Patched versions |
|---|---|---|
| security verify access | ≥ 10.0.0, < 10.0.9 | 10.0.9 |
| security verify access docker | ≥ 10.0.0, < 10.0.9 | 10.0.9 |
IBM Security Verify Access Appliance and Docker 10.0 through 10.0.8 could allow a remote attacker to enumerate usernames due to an observable response discrepancy of disabled accounts.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free