Search
Find a vulnerability
Search criteria
4 vulnerabilities found for Verify Identity Access Digital Credentials by IBM
CVE-2024-56343 (GCVE-0-2024-56343)
Vulnerability from nvd – Published: 2025-06-06 01:28 – Updated: 2025-08-24 11:58
VLAI
EPSS
VEX
Title
IBM Verify Identity Access Digital Credentials denial of service
Summary
IBM Verify Identity Access Digital Credentials 24.06 could allow an authenticated user to crash the service with a specially crafted POST request.
Severity
4.3 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-771 - Missing Reference to Active Allocated Resource
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://www.ibm.com/support/pages/node/7235710 | vendor-advisorypatch |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | Verify Identity Access Digital Credentials |
Affected:
24.06
cpe:2.3:a:ibm:security_verify_access:24.06:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-56343",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-06-09T14:39:51.743008Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-06-09T14:39:56.449Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:ibm:security_verify_access:24.06:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "Verify Identity Access Digital Credentials",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "24.06"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "IBM Verify Identity Access Digital Credentials 24.06 could allow an authenticated user to crash the service with a specially crafted POST request."
}
],
"value": "IBM Verify Identity Access Digital Credentials 24.06 could allow an authenticated user to crash the service with a specially crafted POST request."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-771",
"description": "CWE-771 Missing Reference to Active Allocated Resource",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-08-24T11:58:26.286Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://www.ibm.com/support/pages/node/7235710"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "IBM strongly recommends that customers update to the latest versions of software.\u003cbr\u003e\u003cbr\u003e \u003cbr\u003e\u003cbr\u003eThe IBM Verify Identity Access Digital Credentials can be pulled from IBM Cloud Registry using the following command -\u003cbr\u003e\u003cbr\u003edocker pull icr.io/ivia/ivia-digital-credentials:latest\u003cbr\u003e"
}
],
"value": "IBM strongly recommends that customers update to the latest versions of software.\n\n \n\nThe IBM Verify Identity Access Digital Credentials can be pulled from IBM Cloud Registry using the following command -\n\ndocker pull icr.io/ivia/ivia-digital-credentials:latest"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "IBM Verify Identity Access Digital Credentials denial of service",
"x_generator": {
"engine": "Vulnogram 0.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2024-56343",
"datePublished": "2025-06-06T01:28:38.990Z",
"dateReserved": "2024-12-20T13:55:07.212Z",
"dateUpdated": "2025-08-24T11:58:26.286Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-56342 (GCVE-0-2024-56342)
Vulnerability from nvd – Published: 2025-06-06 01:27 – Updated: 2025-08-24 11:58
VLAI
EPSS
VEX
Title
IBM Verify Identity Access Digital Credentials information disclosure
Summary
IBM Verify Identity Access Digital Credentials 24.06 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.
Severity
4.3 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-209 - Generation of Error Message Containing Sensitive Information
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://www.ibm.com/support/pages/node/7235710 | vendor-advisorypatch |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | Verify Identity Access Digital Credentials |
Affected:
24.06
cpe:2.3:a:ibm:security_verify_access:24.06:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-56342",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-06-06T15:00:08.865765Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-06-06T15:01:33.633Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:ibm:security_verify_access:24.06:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "Verify Identity Access Digital Credentials",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "24.06"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "IBM Verify Identity Access Digital Credentials 24.06 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system."
}
],
"value": "IBM Verify Identity Access Digital Credentials 24.06 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-209",
"description": "CWE-209 Generation of Error Message Containing Sensitive Information",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-08-24T11:58:08.961Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://www.ibm.com/support/pages/node/7235710"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "IBM strongly recommends that customers update to the latest versions of software.\u003cbr\u003e\u003cbr\u003e \u003cbr\u003e\u003cbr\u003eThe IBM Verify Identity Access Digital Credentials can be pulled from IBM Cloud Registry using the following command -\u003cbr\u003e\u003cbr\u003edocker pull icr.io/ivia/ivia-digital-credentials:latest\u003cbr\u003e"
}
],
"value": "IBM strongly recommends that customers update to the latest versions of software.\n\n \n\nThe IBM Verify Identity Access Digital Credentials can be pulled from IBM Cloud Registry using the following command -\n\ndocker pull icr.io/ivia/ivia-digital-credentials:latest"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "IBM Verify Identity Access Digital Credentials information disclosure",
"x_generator": {
"engine": "Vulnogram 0.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2024-56342",
"datePublished": "2025-06-06T01:27:08.207Z",
"dateReserved": "2024-12-20T13:55:07.212Z",
"dateUpdated": "2025-08-24T11:58:08.961Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-56343 (GCVE-0-2024-56343)
Vulnerability from cvelistv5 – Published: 2025-06-06 01:28 – Updated: 2025-08-24 11:58
VLAI
EPSS
VEX
Title
IBM Verify Identity Access Digital Credentials denial of service
Summary
IBM Verify Identity Access Digital Credentials 24.06 could allow an authenticated user to crash the service with a specially crafted POST request.
Severity
4.3 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-771 - Missing Reference to Active Allocated Resource
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://www.ibm.com/support/pages/node/7235710 | vendor-advisorypatch |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | Verify Identity Access Digital Credentials |
Affected:
24.06
cpe:2.3:a:ibm:security_verify_access:24.06:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-56343",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-06-09T14:39:51.743008Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-06-09T14:39:56.449Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:ibm:security_verify_access:24.06:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "Verify Identity Access Digital Credentials",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "24.06"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "IBM Verify Identity Access Digital Credentials 24.06 could allow an authenticated user to crash the service with a specially crafted POST request."
}
],
"value": "IBM Verify Identity Access Digital Credentials 24.06 could allow an authenticated user to crash the service with a specially crafted POST request."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-771",
"description": "CWE-771 Missing Reference to Active Allocated Resource",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-08-24T11:58:26.286Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://www.ibm.com/support/pages/node/7235710"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "IBM strongly recommends that customers update to the latest versions of software.\u003cbr\u003e\u003cbr\u003e \u003cbr\u003e\u003cbr\u003eThe IBM Verify Identity Access Digital Credentials can be pulled from IBM Cloud Registry using the following command -\u003cbr\u003e\u003cbr\u003edocker pull icr.io/ivia/ivia-digital-credentials:latest\u003cbr\u003e"
}
],
"value": "IBM strongly recommends that customers update to the latest versions of software.\n\n \n\nThe IBM Verify Identity Access Digital Credentials can be pulled from IBM Cloud Registry using the following command -\n\ndocker pull icr.io/ivia/ivia-digital-credentials:latest"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "IBM Verify Identity Access Digital Credentials denial of service",
"x_generator": {
"engine": "Vulnogram 0.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2024-56343",
"datePublished": "2025-06-06T01:28:38.990Z",
"dateReserved": "2024-12-20T13:55:07.212Z",
"dateUpdated": "2025-08-24T11:58:26.286Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-56342 (GCVE-0-2024-56342)
Vulnerability from cvelistv5 – Published: 2025-06-06 01:27 – Updated: 2025-08-24 11:58
VLAI
EPSS
VEX
Title
IBM Verify Identity Access Digital Credentials information disclosure
Summary
IBM Verify Identity Access Digital Credentials 24.06 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.
Severity
4.3 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-209 - Generation of Error Message Containing Sensitive Information
Assigner
References
1 reference
| URL | Tags |
|---|---|
| https://www.ibm.com/support/pages/node/7235710 | vendor-advisorypatch |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| IBM | Verify Identity Access Digital Credentials |
Affected:
24.06
cpe:2.3:a:ibm:security_verify_access:24.06:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2024-56342",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-06-06T15:00:08.865765Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-06-06T15:01:33.633Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:ibm:security_verify_access:24.06:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "Verify Identity Access Digital Credentials",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "24.06"
}
]
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "IBM Verify Identity Access Digital Credentials 24.06 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system."
}
],
"value": "IBM Verify Identity Access Digital Credentials 24.06 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-209",
"description": "CWE-209 Generation of Error Message Containing Sensitive Information",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-08-24T11:58:08.961Z",
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm"
},
"references": [
{
"tags": [
"vendor-advisory",
"patch"
],
"url": "https://www.ibm.com/support/pages/node/7235710"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "IBM strongly recommends that customers update to the latest versions of software.\u003cbr\u003e\u003cbr\u003e \u003cbr\u003e\u003cbr\u003eThe IBM Verify Identity Access Digital Credentials can be pulled from IBM Cloud Registry using the following command -\u003cbr\u003e\u003cbr\u003edocker pull icr.io/ivia/ivia-digital-credentials:latest\u003cbr\u003e"
}
],
"value": "IBM strongly recommends that customers update to the latest versions of software.\n\n \n\nThe IBM Verify Identity Access Digital Credentials can be pulled from IBM Cloud Registry using the following command -\n\ndocker pull icr.io/ivia/ivia-digital-credentials:latest"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "IBM Verify Identity Access Digital Credentials information disclosure",
"x_generator": {
"engine": "Vulnogram 0.2.0"
}
}
},
"cveMetadata": {
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"assignerShortName": "ibm",
"cveId": "CVE-2024-56342",
"datePublished": "2025-06-06T01:27:08.207Z",
"dateReserved": "2024-12-20T13:55:07.212Z",
"dateUpdated": "2025-08-24T11:58:08.961Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}