Home
HIGH: 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:HDefault status
unaffected
10.0.0 (semver)
affected
11.0.0
affected
Default status
unaffected
10.0.0 (semver)
affected
11.0.0
affected
Description
IBM Security Verify Access 10.0.0 through 10.0.9, 11.0.0, IBM Verify Identity Access Container 10.0.0 through 10.0.9, and 11.0.0, under certain configurations, contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data.
Problem types
CWE-798 Use of Hard-coded Credentials
Product status
10.0.0 (semver)
11.0.0
10.0.0 (semver)
11.0.0
References
www.ibm.com/support/pages/node/7247753
