IBM Security Verify Access Appliance and Container Cleartext Transmission of Sensitive Data Vulnerability

A vulnerability exists in IBM Security Verify Access Appliance and Container versions 10.0.0 through 10.0.8, where sensitive or security-critical data is transmitted in cleartext over a communication channel that can be intercepted by unauthorized actors.

Impact

Exploitation of this vulnerability could lead to unauthorized interception of sensitive or security-critical data.

Remediation

Users are encouraged to update to IBM Security Verify Access version 10.0.9 or IBM Verify Identity Access version 11.0. Instructions for downloading these versions are available on the IBM Support website.