IBM Security Verify Access 10.0.0 through 10.0.7 and IBM Application Gateway 20.01 through 24.03 could allow a remote attacker to obtain highly sensitive private information or cause a denial of service using a specially crafted HTTP request. IBM X-Force ID: 286584.
References
| Link | Resource |
|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilities/286584 | Vendor Advisory |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/286584 | Vendor Advisory |
| https://www.ibm.com/support/pages/node/7145828 | Vendor Advisory |
| https://www.ibm.com/support/pages/node/7145828 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
14 Aug 2025, 18:54
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | ||
| First Time |
Ibm application Gateway
Ibm Ibm security Verify Access |
|
| References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/286584 - Vendor Advisory | |
| References | () https://www.ibm.com/support/pages/node/7145828 - Vendor Advisory | |
| CPE | cpe:2.3:a:ibm:security_verify_access:*:*:*:*:*:*:*:* cpe:2.3:a:ibm:application_gateway:*:*:*:*:*:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 10.0 |
04 Apr 2024, 19:24
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-04-04 18:15
Updated : 2025-08-14 18:54
NVD link : CVE-2024-28787
Mitre link : CVE-2024-28787
JSON object : View
Products Affected
ibm
- security_verify_access
- application_gateway
CWE
No CWE.