CVE-2023-35016

Summary

CVE-2023-35016 is a vulnerability affecting IBM Security Verify Governance, Identity Manager 10.0. This issue allows a remote attacker to traverse directories on the system by crafting specific URL requests with "dot dot" sequences (/../). By exploiting this vulnerability, an attacker could potentially gain unauthorized access to sensitive files or information, posing a significant risk to system security. IBM has assigned X-Force ID 257772 to this issue. Organizations using IBM Security Verify Governance, Identity Manager 10.0 are advised to apply the recommended patches or updates as soon as possible to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.