IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 is vulnerable to a denial of service attack.
Weakness
The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Security_verify_access | Ibm | 10.0.0 (including) | 10.0.9.2 (including) |
| Security_verify_access_container | Ibm | 10.0.0.0 (including) | 10.0.9.2 (including) |
| Verify_identity_access | Ibm | 11.0 (including) | 11.0.3 (including) |
| Verify_identity_access_container | Ibm | 11.0.0.0 (including) | 11.0.3 (including) |