Remote Information Disclosure in IBM Verify Identity Access Digital Credentials

CVE-2024-56342

What is CVE-2024-56342?

IBM Verify Identity Access Digital Credentials 24.06 is susceptible to an information disclosure vulnerability that can be exploited by remote attackers. When a detailed technical error message is generated and displayed in the user's browser, it may inadvertently expose sensitive information. This information can be leveraged in subsequent attacks targeting the underlying system, potentially leading to unauthorized access or data compromise. Organizations utilizing this product should review their configurations and implement security measures to mitigate the risk associated with this vulnerability.

References