IBM Security Verify Access XSS Vulnerability CVE-2022-109126 Advisory

Vulnerability Overview Vulnerability Title: IBM Identity Access and IBM Security Verify Access CVE-2022-109126 Vulnerability Description: The IBM Security Verify Access application may allow an attacker to execute arbitrary code by exploiting a Cross-Site Scripting (XSS) vulnerability. CVSS Score: 6.1 CVSS Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N Scope of Impact Affected Products: - IBM Security Verify Access - IBM Security Verify Access (versions 10.0.0.0 to 10.0.5.3) Remediation Fixed Versions: - IBM Security Verify Access 10.0.6.0 and later - IBM Security Verify Access 10.0.5.3 and later Additional Information Document ID: 775964 Last Modified: June 14, 2022 Initial Release Date: June 14, 2022 Related Resources IBM Security Engineering Blog: Link IBM Product Security Incident Response Blog: Link Disclaimer The information in this document is based on information available to IBM at the time of publication. IBM does not guarantee the accuracy or completeness of the information and is not liable for any loss resulting from the use of information contained in this document. Products Affected Products: - IBM Security Verify Access - IBM Security Verify Access Notes Information in this document may change at any time without notice. IBM reserves the right to change information in this document at any time and assumes no obligation to notify. Contact Information IBM Security Engineering Blog: Link IBM Product Security Incident Response Blog: Link Document Information Document ID: 775964 Last Modified: June 14, 2022 Initial Release Date: June 14, 2022 Related Resources IBM Security Engineering Blog: Link IBM Product Security Incident Response Blog: Link Disclaimer The information in this document is based on information available to IBM at the time of publication. IBM does not guarantee the accuracy or completeness of the information and is not liable for any loss resulting from the use of information contained in this document. Products Affected Products: - IBM Security Verify Access - IBM Security Verify Access Notes Information in this document may change at any time without notice. IBM reserves the right to change information in this document at any time and assumes no obligation to notify. Contact Information IBM Security Engineering Blog: Link IBM Product Security Incident Response Blog: Link Document Information Document ID: 775964 Last Modified: June 14, 2022 Initial Release Date: June 14, 2022 Related Resources IBM Security Engineering Blog: Link IBM Product Security Incident Response Blog: Link Disclaimer The information in this document is based on information available to IBM at the time of publication. IBM does not guarantee the accuracy or completeness of the information and is not liable for any loss resulting from the use of information contained in this document. Products Affected Products: - IBM Security Verify Access - IBM Security Verify Access Notes Information in this document may change at any time without notice. IBM reserves the right to change information in this document at any time and assumes no obligation to notify. Contact Information IBM Security Engineering Blog: Link IBM Product Security Incident Response Blog: Link Document Information Document ID: 775964 Last Modified: June 14, 2022 Initial Release Date: June 14, 2022 Related Resources IBM Security Engineering Blog: Link IBM Product Security Incident Response Blog: Link Disclaimer The information in this document is based on information available to IBM at the time of publication. IBM does not guarantee the accuracy or completeness of the information and is not liable for any loss resulting from the use of information contained in this document. Products Affected Products: - IBM Security Verify Access - IBM Security Verify Access Notes Information in this document may change at any time without notice. IBM reserves the right to change information in this document at any time and assumes no obligation to notify. Contact Information IBM Security Engineering Blog: Link IBM Product Security Incident Response Blog: Link Document Information Document ID: 775964 Last Modified: June 14, 2022 Initial Release Date: June 14, 2022 Related Resources IBM Security Engineering Blog: Link IBM Product Security Incident Response Blog: Link Disclaimer The information in this document is based on information available to IBM at the time of publication. IBM does not guarantee the accuracy or completeness of the information and is not liable for any loss resulting from the use of information contained in this document. Products Affected Products: - IBM Security Verify Access - IBM Security Verify Access Notes Information in this document may change at any time without notice. IBM reserves the right to change information in this document at any time and assumes no obligation to notify. Contact Information IBM Security Engineering Blog: Link IBM Product Security Incident Response Blog: Link Document Information Document ID: 775964 Last Mo

Goal Reached Thanks to every supporter — we hit 100%!

IBM Security Verify Access XSS Vulnerability CVE-2022-109126 Advisory

More from this source