Security_verify_access

Repositories	Unknown: This might be proprietary software.
#Vulnerabilities	72

Date	Id	Summary	Products	Score	Patch	Annotated
2024-08-29	CVE-2024-35133	IBM Security Verify Access 10.0.0 through 10.0.8 OIDC Provider could allow a remote authenticated attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim.	Security_verify_access, Security_verify_access_docker	8.2
2020-10-15	CVE-2019-4552	IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 are vulnerable to HTTP response splitting attacks. A remote attacker could exploit this vulnerability using specially-crafted URL to cause the server to return a split response, once the URL is clicked. This would allow the attacker to perform further attacks, such as Web cache poisoning, cross-site scripting, and possibly obtain sensitive information. IBM X-Force ID: 165960.	Security_access_manager, Security_verify_access	6.1