Weakness
IBM Security Verify could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.
Affected products
- ibm security_verify_access
- ibm security_verify_access_container
- ibm verify_identity_access
- ibm verify_identity_access_container
References
Find the bug before an attacker does.
Sign in with GitHub and run your first audit in under a minute. The free plan needs no credit card.