IBM Security Verify Governance Identity Manager Sensitive Information Disclosure Vulnerability

Vulnerability

A vulnerability in IBM Security Verify Governance Identity Manager version 10.0.2 could allow remote attackers to access sensitive information. This issue arises when the application returns detailed technical error messages, which could be leveraged for further attacks against the system.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information, potentially facilitating additional attacks against the system.

Remediation

Users are advised to update to IBM Security Verify Governance version 10.0.2.0-ISS-ISVG-IGVA-FP0006. Instructions for downloading this update are available on the IBM Support Fix Central website.

Added: Aug 28, 2025, 3:22 AM
Updated: Aug 28, 2025, 3:22 AM

Vulnerability Rating

Custom Algorithm
spread
0.8
impact
2.5
exploitability
7.4
remediation
7.7
relevance
0.4
threat
0.0
urgency
2.9
incentive
5.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.