CVE-2026-11904: Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access
IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 and IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.
Other sources
IBM Verify Identity Access could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-11904?
CVE-2026-11904 has a risk score of 18, indicating a high severity vulnerability.
What type of vulnerability is CVE-2026-11904?
CVE-2026-11904 is a security vulnerability that can expose sensitive information through detailed error messages.
How can I mitigate CVE-2026-11904?
Mitigation for CVE-2026-11904 involves configuring the system to minimize the exposure of detailed error messages to users.
Who is affected by CVE-2026-11904?
CVE-2026-11904 affects users of IBM Verify Identity Access and IBM Security Verify Access software products.
What is the potential impact of CVE-2026-11904 on my system?
The impact of CVE-2026-11904 includes the risk of remote attackers gaining sensitive system information that could lead to further attacks.