IBM Security Verify Access Vulnerabilities Could Lead to Sensitive Data Exposure or Denial of Service

CVE-2024-28787

What is CVE-2024-28787?

IBM Security Verify Access versions 10.0.0 through 10.0.7 and IBM Application Gateway versions 20.01 through 24.03 are susceptible to exploitation via specially crafted HTTP requests. An attacker could leverage this vulnerability to gain access to sensitive private information, which could significantly compromise security and privacy. Furthermore, this vulnerability may enable attempts to cause denial of service, impacting the availability of affected services.

References