CVE-2023-25927
6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Summary
IBM Security Verify Access 10.0.0, 10.0.1, 10.0.2, 10.0.3, 10.0.4, and 10.0.5 could allow an attacker to crash the webseald process using specially crafted HTTP requests resulting in loss of access to the system. IBM X-Force ID: 247635.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| IBM | Security Verify Access | 10.0.0, 10.0.1, 10.0.2, 10.0.3, 10.0.4, 10.0.5 | affected |
Weaknesses
- CWE-20: CWE-20 Improper Input Validation
ADP Enrichment
CVE Program Container
Additional References
- https://https://www.ibm.com/support/pages/node/6989653
- https://exchange.xforce.ibmcloud.com/vulnerabilities/247635
- http://seclists.org/fulldisclosure/2024/Nov/1
- http://seclists.org/fulldisclosure/2024/Nov/0
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: partial
References
- https://https://www.ibm.com/support/pages/node/6989653
- https://exchange.xforce.ibmcloud.com/vulnerabilities/247635
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.