Executive brief
IBM Verify Identity Access Advanced Access Control is a security platform used to manage user identities and control access to corporate resources. A vulnerability in this system may allow attackers to access sensitive information they should not be authorized to view, potentially exposing confidential data or account details.
Technical details
This vulnerability is an information disclosure issue affecting IBM Verify Identity Access Advanced Access Control. The attack vector is network-based, allowing remote exploitation without requiring authentication. An attacker can leverage this flaw to access sensitive information stored within the system. IBM has released security patches to address this vulnerability, and affected customers should apply updates promptly.
Affected products
- IBM Verify Identity Access Advanced Access Control <UNKNOWN>
Timeline
- 2026-09-04: disclosed