VULNERABILITY INTELLIGENCE

CVE-2026-11904

CVSS score5.3 MEDIUM
EPSS probability0.40%
CISA KEVNot currently listed
Published2026-07-30
Last modified2026-08-12
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 and IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.

Weakness classification

  • CWE-209: Generation of Error Message Containing Sensitive Information

Primary references