CVE-2022-43891

Name of the Vulnerable Software and Affected Versions IBM Security Verify Privilege On-Premises version 11.5

Description A remote attacker could obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.

Recommendations For IBM Security Verify Privilege On-Premises version 11.5, consider disabling the feature that returns detailed technical error messages in the browser until a patch is available. Restrict access to sensitive information to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.