Severity
Medium
Analysis Summary
CVE-2024-31883 CVSS:5.3
IBM Security Verify Access 10.0.0.0 through 10.0.7.1, under certain configurations, could allow an unauthenticated attacker to cause a denial of service due to asymmetric resource consumption.
CVE-2023-30430 CVSS:6.2
IBM Security Verify Access 10.0.0 through 10.0.7.1could allow a local user to obtain sensitive information from trace logs.
Impact
- Denial of Service
- Information Disclosure
Indicators of Compromise
CVE
- CVE-2024-31883
- CVE-2023-30430
Affected Vendors
IBM
Affected Products
- IBM Security Verify Access 10.0.0.0
- IBM Security Verify Access 10.0.7.1
Remediation
Refer to IBM Security Advisory for patch, upgrade or suggested workaround information.