| Package | Affected versions | Patched versions |
|---|---|---|
| security verify access | = 10.0.9.2≥ 10.0.0, ≤ 10.0.9.2 | |
| verify identity access | ≥ 11.0, ≤ 11.0.3 | |
| verify identity access container | ≥ 11.0.0.0, ≤ 11.0.3.0 |
IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 contains a format string injection vulnerability in the management interface that allows attackers to cause denial of service and information disclosure by crafting a malicious HTTP request.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free