Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| IBM | Security Verify Directory | affected |
|
||||||
| IBM | Verify Directory | affected |
|
No data.
No data.
No data available yet.
Vendor Solution
IBM strongly encourages customers to update their systems promptly. Product(s)Affected Version(s)FixIBM Security Verify Directory10.0.0-10.0.4Download and install IBM Security Verify Directory v10.0.4.4 Download document - https://www.ibm.com/support/pages/node/7292855 IBM Verify Directory11.0.0Download and install IBM Verify Directory v11.0.1.2 Download document - https://www.ibm.com/support/pages/node/7290214
Tracking
Sign in to view the affected projects.
No advisories yet.
| Link | Providers |
|---|---|
| https://www.ibm.com/support/pages/node/7293828 |
|
Sun, 08 Nov 2026 19:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | IBM Security Verify Directory 10.0.0 through 10.0.4 and IBM Verify Directory 11.0.0 exposes debug endpoints that disclose system information including server versions and session identifiers. This information can be used to identify vulnerable software versions. | |
| Title | IBM Verify Directory is affected by multiple vulnerabilities | |
| First Time appeared |
Ibm
Ibm security Verify Directory Ibm verify Directory |
|
| Weaknesses | CWE-200 | |
| CPEs | cpe:2.3:a:ibm:security_verify_directory:10.0.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:verify_directory:11.0.0:*:*:*:*:*:*:* |
|
| Vendors & Products |
Ibm
Ibm security Verify Directory Ibm verify Directory |
|
| References |
| |
| Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: ibm
Published:
Updated: 2026-11-08T18:45:20.654Z
Reserved: 2026-05-14T20:02:22.497Z
Link: CVE-2026-8642
Vulnrichment
No data.
NVD
Status : Awaiting Analysis
Published: 2026-11-08T19:17:42.870
Modified: 2026-11-08T19:17:42.987
Link: CVE-2026-8642
Redhat
No data.
OpenCVE Enrichment
Updated: 2026-11-08T20:30:14Z
-
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor