Unauthenticated Access to Sensitive Information via SOAP API

CVE-2024-31887

What is CVE-2024-31887?

A vulnerability in IBM Security Verify Privilege 11.6.25 allows unauthenticated users to exploit the SOAP API and gain access to sensitive information. This issue poses a significant risk as it could lead to unauthorized data exposure, which might affect the integrity and confidentiality of user information. Organizations using this version are encouraged to review the associated security implications and implement necessary mitigations to protect their data and maintain compliance.

References