| Package | Affected versions | Patched versions |
|---|---|---|
| security verify access | ≥ 10.0.0, < 10.0.9.2 | 10.0.9.2 |
| security verify access container | ≥ 10.0.0.0, ≤ 10.0.9.1 | |
| verify identity access | ≥ 11.0, < 11.0.3 | 11.0.3 |
| verify identity access container | ≥ 11.0.0.0, ≤ 11.0.2 |
IBM Security Verify could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free