IBM Verify Identity Access vulnerabilities

IBM Verify Identity Access and Security Verify Access products may return detailed technical error messages in the browser, allowing a remote attacker to obtain sensitive information.

IBM Verify Identity Access and IBM Security Verify Access contain an open redirect vulnerability that allows a remote attacker to conduct phishing attacks by using a specially crafted request to redirect a victim to arbitrary websites.

IBM Verify Identity Access and IBM Security Verify Access in the specified versions could allow an attacker with read-only privileges to make unauthorized modifications and deployments outside of their assigned permissions.