IBM Security Verify Access has a flaw that allows attackers to launch phishing attacks. #cybersecurity #vulnerability

The flaw is an open-redirect vulnerability that allows attackers to spoof the original URL of IBM Security Verify Access.

Attackers can use this vulnerability to lure victims into a malicious website and steal sensitive information.

The vulnerability is present due to the default configuration of the Advanced Access Control module.

IBM has already released a patch to fix this vulnerability.

Affected products include IBM Security Verify Access Appliance and Docker.

To fix the vulnerability, users must modify the sps.targetURLWhitelist property with a list of whitelisting URLs.

Stay informed about the latest cybersecurity news on GoogleNews, Linkedin, Twitter, and Facebook.

https://cybersecuritynews.com/ibm-security-verify-access-flaw/

Reply to this note

Please Login to reply.

Discussion

No replies yet.