IBM Verify Identity Access and IBM Security Verify Access Internal Authentication Endpoint Access Vulnerability

A vulnerability exists in IBM Verify Identity Access and IBM Security Verify Access, allowing attackers to reach internal authentication endpoints that should be protected by the reverse proxy. This issue is present in multiple versions of both products.

Impact

Exploitation of this vulnerability could lead to unauthorized access to internal authentication endpoints, potentially allowing attackers to manipulate authentication processes or access protected resources.

Remediation

Users are advised to update to IBM Verify Identity Access v11.0.2 IF1 or IBM Security Verify Access v10.0.9.1 IF1. Instructions for downloading these versions are available on the IBM Support Fix Central website.