CVE-2024-56342
BaseFortify
Publication date: 2025-06-06
Last updated on: 2025-08-20
Assigner: IBM Corporation
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| ibm | verify_identity_access_digital_credentials | 24.06 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-209 | The product generates an error message that includes sensitive information about its environment, users, or associated data. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability in IBM Verify Identity Access Digital Credentials 24.06 allows a remote attacker to obtain sensitive information by causing the system to return a detailed technical error message in the browser. This information disclosure can help the attacker in planning further attacks against the system.
How can this vulnerability impact me? :
The impact of this vulnerability is that an attacker could gain sensitive information from the detailed error messages, which could be used to exploit the system further. This could lead to increased risk of unauthorized access or other attacks.