VULN/vuln-cve
1
0 Fork 0
Code Pull Requests Actions Activity
Files
c1444140e59c61ba154436ea0cd6284d8a97c3f0
vuln-cve/data/2026/11xxx/CVE-2026-11930.json
T

199 lines
9.3 KiB
JSON
Raw Blame History

This file contains invisible Unicode characters
This file contains invisible Unicode characters that are indistinguishable to humans but may be processed differently by a computer. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
{
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"cveMetadata": {
"cveId": "CVE-2026-11930",
"assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"state": "PUBLISHED",
"assignerShortName": "ibm",
"dateReserved": "2026-06-10T18:45:34.507Z",
"datePublished": "2026-10-08T21:06:47.757Z",
"dateUpdated": "2026-10-09T14:50:08.029Z"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522",
"shortName": "ibm",
"dateUpdated": "2026-10-08T21:06:47.757Z"
},
"title": "Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access",
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"cweId": "CWE-285",
"description": "CWE-285 Improper Authorization",
"type": "CWE"
}
]
}
],
"affected": [
{
"vendor": "IBM",
"product": "Security Verify Access",
"versions": [
{
"status": "affected",
"version": "10.0",
"lessThanOrEqual": "10.0.9.2",
"versionType": "semver"
}
],
"cpes": [
"cpe:2.3:a:ibm:security_verify_access:10.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:security_verify_access:10.0.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:security_verify_access:10.0.9.2:*:*:*:*:*:*:*"
]
},
{
"vendor": "IBM",
"product": "Verify Identity Access",
"versions": [
{
"status": "affected",
"version": "11.0",
"lessThanOrEqual": "11.0.3",
"versionType": "semver"
}
],
"cpes": [
"cpe:2.3:a:ibm:verify_identity_access:11.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:verify_identity_access:11.0.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:verify_identity_access:11.0.3:*:*:*:*:*:*:*"
]
},
{
"vendor": "IBM",
"product": "Security Verify Access Container",
"versions": [
{
"status": "affected",
"version": "10.0",
"lessThanOrEqual": "10.0.9.2",
"versionType": "semver"
}
],
"cpes": [
"cpe:2.3:a:ibm:security_verify_access_container:10.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:security_verify_access_container:10.0.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:security_verify_access_container:10.0.9.2:*:*:*:*:*:*:*"
]
},
{
"vendor": "IBM",
"product": "Verify Identity Access Container",
"versions": [
{
"status": "affected",
"version": "11.0",
"lessThanOrEqual": "11.0.3",
"versionType": "semver"
}
],
"cpes": [
"cpe:2.3:a:ibm:verify_identity_access_container:11.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:verify_identity_access_container:11.0.0:*:*:*:*:*:*:*",
"cpe:2.3:a:ibm:verify_identity_access_container:11.0.3:*:*:*:*:*:*:*"
]
}
],
"descriptions": [
{
"lang": "en",
"value": "IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 may not enforce authorization correctly for some web servers.",
"supportingMedia": [
{
"type": "text/html",
"base64": false,
"value": "<p>IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3<span>&nbsp;may not enforce authorization correctly for some web servers.</span></p>"
}
]
}
],
"references": [
{
"url": "https://www.ibm.com/support/pages/node/7291628",
"tags": [
"vendor-advisory",
"patch"
]
}
],
"metrics": [
{
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
],
"cvssV3_1": {
"version": "3.1",
"attackVector": "NETWORK",
"attackComplexity": "HIGH",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE",
"baseSeverity": "MEDIUM",
"baseScore": 5.9,
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N"
}
}
],
"solutions": [
{
"lang": "en",
"value": "IBM encourages customers to update their systems promptly.\n\nAppliance:\nAffected Products\nFix availability\nIBM Verify Identity Access\nDownload IBM Verify Identity Access v11.0.3.1\nIBM Security Verify Access\nDownload IBM Security Verify Access v10.0.9.3\n\nContainer:\nContainer Download",
"supportingMedia": [
{
"type": "text/html",
"base64": false,
"value": "<p><strong>IBM encourages customers to update their systems promptly.</strong></p><p></p><p><strong>Appliance:</strong></p><div><table><thead><tr><td><p><strong>Affected Products</strong></p></td><td><p><strong>Fix availability</strong></p></td></tr><tr><td><p>IBM Verify Identity Access</p></td><td><p><a href=\"https://www.ibm.com/support/fixcentral/swg/selectFixes?product=ibm%2FTivoli%2FIBM+Verify+Identity+Access&amp;fixids=11.0.3-ISS-IVIA-FP0001&amp;source=dbluesearch&amp;function=fixId&amp;parent=IBM%20Security\" rel=\"nofollow\">Download IBM Verify Identity Access v11.0.3.1</a></p></td></tr><tr><td><p>IBM Security Verify Access</p></td><td><p><a href=\"https://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FTivoli%2FIBM+Security+Verify+Access&amp;fixids=10.0.9-ISS-ISVA-FP0003&amp;source=SAR\" rel=\"nofollow\">Download IBM Security Verify Access v10.0.9.3</a></p></td></tr></thead></table></div><p></p><p><strong>Container:</strong></p><p><a href=\"https://docs.verify.ibm.com/ibm-security-verify-access/docs/containers\" rel=\"nofollow\">Container Download</a></p>"
}
]
}
]
},
"adp": [
{
"metrics": [
{
"other": {
"type": "ssvc",
"content": {
"id": "CVE-2026-11930",
"role": "CISA Coordinator",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"version": "2.0.3",
"timestamp": "2026-10-09T14:33:55.956049Z"
}
}
}
],
"title": "CISA ADP Vulnrichment",
"providerMetadata": {
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP",
"dateUpdated": "2026-10-09T14:50:08.029Z"
}
}
]
}
}
View Git Blame Copy Permalink