Authentication Bypass Vulnerability in IBM Security Verify Access

CVE-2021-39070

Summary

A vulnerability exists in IBM Security Verify Access versions 10.0.0.0, 10.0.1.0, and 10.0.2.0 that allows attackers with the advanced access control authentication service enabled to authenticate as any user. This vulnerability poses serious security risks as it circumvents normal authentication processes, potentially allowing unauthorized access to sensitive data and systems. Organizations using these versions should promptly assess their configurations and implement appropriate mitigations.

References