CVE-2023-25927

IBM Security Verify Access 10.0.0, 10.0.1, 10.0.2, 10.0.3, 10.0.4, and 10.0.5 could allow an attacker to crash the webseald process using specially crafted HTTP requests resulting in loss of access to the system. IBM X-Force ID: 247635.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ibm:security_verify_access:10.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:security_verify_access:10.0.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:security_verify_access:10.0.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:security_verify_access:10.0.3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:security_verify_access:10.0.4:*:*:*:*:*:*:*
cpe:2.3:a:ibm:security_verify_access:10.0.5:*:*:*:*:*:*:*

History

24 May 2023, 16:35

Type Values Removed Values Added
First Time Ibm security Verify Access
Ibm
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.5
CWE CWE-20 NVD-CWE-noinfo
CPE cpe:2.3:a:ibm:security_verify_access:10.0.4:*:*:*:*:*:*:*
cpe:2.3:a:ibm:security_verify_access:10.0.3:*:*:*:*:*:*:*
cpe:2.3:a:ibm:security_verify_access:10.0.1:*:*:*:*:*:*:*
cpe:2.3:a:ibm:security_verify_access:10.0.2:*:*:*:*:*:*:*
cpe:2.3:a:ibm:security_verify_access:10.0.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:security_verify_access:10.0.5:*:*:*:*:*:*:*
References
  • (MISC) https://www.ibm.com/support/pages/node/6989653?_ga=2.22490043.1644592052.1684753176-785517468.1677620719 - Vendor Advisory
References (MISC) https://exchange.xforce.ibmcloud.com/vulnerabilities/247635 - (MISC) https://exchange.xforce.ibmcloud.com/vulnerabilities/247635 - VDB Entry, Vendor Advisory
References (MISC) https://https://www.ibm.com/support/pages/node/6989653 - (MISC) https://https://www.ibm.com/support/pages/node/6989653 - Broken Link

12 May 2023, 18:15

Type Values Removed Values Added
New CVE

Information

Published : 2023-05-12 18:15

Updated : 2023-12-10 15:01


NVD link : CVE-2023-25927

Mitre link : CVE-2023-25927

CVE.ORG link : CVE-2023-25927


JSON object : View

Products Affected

ibm

  • security_verify_access
CWE
NVD-CWE-noinfo CWE-20

Improper Input Validation