✕

Rewterz Annual Threat Intelligence Report 2025 - Download Now

Request a Demo
Rewterz

Ticketmaster Acknowledges Data Breach Following Online Sale of Stolen Data – Active IOCs

June 3, 2024
Rewterz

CVE-2024-21512 – Node.js MySQL2 Vulnerability

June 3, 2024

Multiple IBM Security Verify Access Vulnerabilities

Severity

High

Analysis Summary

CVE-2024-22338 CVSS:4

IBM Security Verify Access OIDC Provider 22.09 through 23.03 could disclose sensitive information to a local user due to hazardous input validation.

CVE-2024-35142 CVSS:8.4

IBM Security Verify Access Docker 10.0.0 through 10.0.6 could allow a local user to escalate their privileges due to execution of unnecessary privileges.

CVE-2024-35141 CVSS:8.4

IBM Security Verify Access Docker 10.0.0 through 10.0.6 could allow a local user to escalate their privileges due to execution of unnecessary privileges.

CVE-2024-35140 CVSS:7.7

IBM Security Verify Access Docker 10.0.0 through 10.0.6 could allow a local user to escalate their privileges due to improper certificate validation.

Impact

  • Information Disclosure
  • Privilege Escalation

Indicators of Compromise

CVE

  • CVE-2024-22338
  • CVE-2024-35142
  • CVE-2024-35141
  • CVE-2024-35140

Affected Vendors

IBM

Affected Products

  • IBM Security Verify Access OIDC Provider 22.09
  • IBM Security Verify Access OIDC Provider 23.03
  • IBM Security Verify Access Docker 10.0.0
  • IBM Security Verify Access Docker 10.0.6

Remediation

Refer to IBM Security Advisory for patch, upgrade or suggested workaround information.

IBM Security Verify Access OIDC Provider

IBM Security Verify Access Docker

Reading this advisory was a good start.

Make it a habit.

Rewterz publishes threat advisories ahead of mainstream cybersecurity media, informed by an AI-Native Autonomous SOC that sees regional threat actor activity in real time. Subscribe to receive each new advisory as it publishes, plus a monthly Middle East threat landscape brief drawn from our own SOC telemetry. For teams evaluating their detection coverage, a 30-minute consultation with a senior analyst is also available, at your pace, when you're ready.

Request a demo