CVE-2024-49805: IBM Security Verify Access Appliance hard coded credentials
IBM Security Verify Access Appliance 10.0.0 through 10.0.8
contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data.
Other sources
IBM Security Verify Access Appliance contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-49805?
CVE-2024-49805 is categorized as a high severity vulnerability due to the presence of hard-coded credentials.
How do I fix CVE-2024-49805?
To fix CVE-2024-49805, update your IBM Security Verify Access Appliance to the latest version beyond 10.0.8 to eliminate the use of hard-coded credentials.
Which versions are affected by CVE-2024-49805?
CVE-2024-49805 affects IBM Security Verify Access Appliance versions 10.0.0 through 10.0.8.
What impact does CVE-2024-49805 have on security?
The hard-coded credentials in CVE-2024-49805 can lead to unauthorized access and potential data breaches.
Is there a workaround for CVE-2024-49805 if I cannot upgrade?
Currently, no specific workaround has been provided for CVE-2024-49805, and upgrading is strongly recommended.