IBM Verify Identity Access Digital Credentials Information Disclosure Vulnerability

An information disclosure vulnerability has been identified in IBM Verify Identity Access Digital Credentials version 24.06. This vulnerability allows remote attackers to obtain sensitive information from detailed technical error messages returned in the browser. The extracted information could be leveraged for further attacks against the system.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information, which could be used to facilitate additional attacks on the system.

Remediation

Users are advised to update to the latest version of IBM Verify Identity Access Digital Credentials. The latest version can be downloaded from the IBM Cloud Registry using the command 'docker pull icr.io/ivia/ivia-digital-credentials:latest'.