IBM Security Verify Information Queue Cryptographic Vulnerability Allowing Decryption of Sensitive Information

A vulnerability exists in IBM Security Verify Information Queue versions 10.0.5, 10.0.6, 10.0.7, and 10.0.8, where weaker than expected cryptographic algorithms could enable an attacker to decrypt highly sensitive information.

Impact

Exploitation of this vulnerability could lead to unauthorized decryption of sensitive information, potentially allowing attackers to access confidential data.

Remediation

Users are advised to upgrade to IBM Security Verify Information Queue version 10.0.11. The latest ISIQ images for v10.0.11 can be downloaded from the IBM Security Information Queue Starter Kit page.