Security Verify Information Queue vulnerabilities
6 known vulnerabilities in Security Verify Information Queue from IBM. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
Security Verify Information Queue: Use of a Broken or Risky Cryptographic Algorithm
IBM Security Verify Information Queue 10.0.5, 10.0.6, 10.0.7, and 10.0.8 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
- 7.5 High severity
Security Verify Information Queue: Generation of Error Message Containing Sensitive Information
IBM Security Verify Information Queue 10.0.4 and 10.0.5 could allow a remote attacker to obtain sensitive information that could aid in further attacks against the system. IBM X-Force ID: 256015.
- 8.8 High severity
Security Verify Information Queue: Cross-Site Request Forgery
IBM Security Verify Information Queue 10.0.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 230814.
- 7.5 High severity
Security Verify Information Queue: Use of Hard-coded Credentials
IBM Security Verify Information Queue 10.0.2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force
- 8.8 High severity
Security Verify Information Queue: Cross-Site Request Forgery
IBM Security Verify Information Queue 10.0.2 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 230812.
- 7.5 High severity
Security Verify Information Queue: Reliance on Cookies without Validation and Integrity Checking
IBM Security Verify Information Queue 10.0.2 could disclose sensitive information due to a missing or insecure SameSite attribute for a sensitive cookie. IBM X-Force ID: 230811.