NotCVE - vendor:"Ibm" product:"Security Verify Access"

Page 2 of 81 results (0.018 seconds)

CVSS: 9.7EPSS: 0%CPEs: 1EXPL: 0

CVE-2024-49806 – IBM Security Verify Access Appliance hard coded credentials

https://notcve.org/view.php?id=CVE-2024-49806

29 Nov 2024 — IBM Security Verify Access Appliance 10.0.0 through 10.0.8 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. • https://www.ibm.com/support/pages/node/7177447 • CWE-798: Use of Hard-coded Credentials •

CVSS: 9.7EPSS: 0%CPEs: 1EXPL: 0

CVE-2024-49805 – IBM Security Verify Access Appliance hard coded credentials

https://notcve.org/view.php?id=CVE-2024-49805

CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 0

CVE-2024-49803 – IBM Security Verify Access Appliance command execution

https://notcve.org/view.php?id=CVE-2024-49803

29 Nov 2024 — IBM Security Verify Access Appliance 10.0.0 through 10.0.8 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. • https://www.ibm.com/support/pages/node/7177447 • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •

CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 1

CVE-2024-35141 – IBM Security Verify Access privilege escalation

https://notcve.org/view.php?id=CVE-2024-35141

04 Nov 2024 — IBM Security Verify Access Docker 10.0.0 through 10.0.6 could allow a local user to escalate their privileges due to execution of unnecessary privileges. IBM Security Verify Access Docker 10.0.0 a 10.0.6 podría permitir que un usuario local aumente sus privilegios debido a la ejecución de privilegios innecesarios. IBM Security Verify Access versions prior to 10.0.8 suffer from authentication bypass, reuse of private keys, local privilege escalation, weak settings, outdated libraries, missing password, hardc... • https://packetstorm.news/files/id/182466 • CWE-250: Execution with Unnecessary Privileges •

CVSS: 8.5EPSS: 0%CPEs: 2EXPL: 3

CVE-2024-35133 – IBM Security Verify Access HTTP open redirect

https://notcve.org/view.php?id=CVE-2024-35133

29 Aug 2024 — IBM Security Verify Access 10.0.0 through 10.0.8 OIDC Provider could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM Security Verify Access ... • https://packetstorm.news/files/id/182287 • CWE-601: URL Redirection to Untrusted Site ('Open Redirect') •

CVSS: 6.2EPSS: 0%CPEs: 1EXPL: 1

CVE-2024-35139 – IBM Security Access Manager Docker information disclosure

https://notcve.org/view.php?id=CVE-2024-35139

28 Jun 2024 — IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 could allow a local user to obtain sensitive information from the container due to incorrect default permissions. IBM X-Force ID: 292415. IBM Security Access Manager Docker 10.0.0.0 a 10.0.7.1 podría permitir que un usuario local obtenga información confidencial del contenedor debido a permisos predeterminados incorrectos. ID de IBM X-Force: 292415. IBM Security Verify Access versions prior to 10.0.8 suffer from authentication bypass, reuse of pri... • https://packetstorm.news/files/id/182466 • CWE-276: Incorrect Default Permissions •

CVSS: 6.2EPSS: 0%CPEs: 1EXPL: 1

CVE-2024-35137 – IBM Security Access Manager Docker information disclosure

https://notcve.org/view.php?id=CVE-2024-35137

28 Jun 2024 — IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 could allow a local user to possibly elevate their privileges due to sensitive configuration information being exposed. IBM X-Force ID: 292413. IBM Security Access Manager Docker 10.0.0.0 a 10.0.7.1 podría permitir que un usuario local posiblemente eleve sus privilegios debido a la exposición de información de configuración confidencial. ID de IBM X-Force: 292413. IBM Security Verify Access versions prior to 10.0.8 suffer from authentication bypas... • https://packetstorm.news/files/id/182466 • CWE-258: Empty Password in Configuration File •

CVSS: 6.2EPSS: 0%CPEs: 1EXPL: 0

CVE-2023-30430 – IBM Security Verify Access information disclosure

https://notcve.org/view.php?id=CVE-2023-30430

27 Jun 2024 — IBM Security Verify Access 10.0.0 through 10.0.7.1 could allow a local user to obtain sensitive information from trace logs. IBM X-Force ID: 252183. • https://exchange.xforce.ibmcloud.com/vulnerabilities/252183 • CWE-532: Insertion of Sensitive Information into Log File •

CVSS: 5.9EPSS: 0%CPEs: 1EXPL: 0

CVE-2024-31883 – IBM Security Verify Access denial of service

https://notcve.org/view.php?id=CVE-2024-31883

27 Jun 2024 — IBM Security Verify Access 10.0.0.0 through 10.0.7.1, under certain configurations, could allow an unauthenticated attacker to cause a denial of service due to asymmetric resource consumption. IBM X-Force ID: 287615. • https://exchange.xforce.ibmcloud.com/vulnerabilities/287615 • CWE-703: Improper Check or Handling of Exceptional Conditions •

CVSS: 8.4EPSS: 0%CPEs: 1EXPL: 1

CVE-2024-35142 – IBM Security Verify Access privilege escalation

https://notcve.org/view.php?id=CVE-2024-35142

31 May 2024 — IBM Security Verify Access Docker 10.0.0 through 10.0.6 could allow a local user to escalate their privileges due to execution of unnecessary privileges. IBM X-Force ID: 292418. IBM Security Verify Access Docker 10.0.0 a 10.0.6 podría permitir que un usuario local escale sus privilegios debido a la ejecución de privilegios innecesarios. ID de IBM X-Force: 292418. IBM Security Verify Access versions prior to 10.0.8 suffer from authentication bypass, reuse of private keys, local privilege escalation, weak set... • https://packetstorm.news/files/id/182466 • CWE-250: Execution with Unnecessary Privileges •

1 2 3 4 5