PT-2025-2725
CVE-2024-45659
·
Published
2025-02-04
·
Updated
2025-12-15
Description by
CVSS 3.1
5.3
MediumMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions:
IBM Security Verify Access Appliance and Container versions 10.0.0 through 10.0.8
Description:
The issue allows a remote attacker to obtain sensitive information when a detailed technical error message is returned. This information could be used in further attacks against the system.
Recommendations:
For versions 10.0.0 through 10.0.8, consider disabling the detailed technical error messages to minimize the risk of exploitation. Restrict access to error messages to prevent potential attackers from obtaining sensitive information. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾