CVE-2024-49806

Summary

IBM Security Verify Access Appliance 10.0.0 through 10.0.8

contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data.

Affected Software

VendorProductVersion RangeStatus
IBMSecurity Verify Access10.0.0 <= 10.0.8affected

Weaknesses

  • CWE-798: CWE-798 Use of Hard-coded Credentials

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: total

References