Timing Side Channel Vulnerability in IBM Security Access Manager and IBM Security Verify Access

CVE-2020-4661

What is CVE-2020-4661?

IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 are susceptible to a timing side channel vulnerability. This flaw may permit attackers to leverage timing discrepancies to gain unauthorized access to sensitive information, which could facilitate subsequent attacks against the affected systems. Organizations using these products should take immediate action to mitigate the risk and secure their environments.

References