CVE-2024-22338: IBM Security Verify Access OIDC Provider information disclosure

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-05-31 · updated 2026-06-17
Weakness: CWE-20

Description

IBM Security Verify Access OIDC Provider 22.09 through 23.03 could disclose sensitive information to a local user due to hazardous input validation. IBM X-Force ID: 279978.

Affected products

IBM Security Verify Access OIDC Provider: from 22.09 through 23.03

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/279978
https://www.ibm.com/support/pages/node/7155340
https://exchange.xforce.ibmcloud.com/vulnerabilities/279978
https://www.ibm.com/support/pages/node/7155340

Get alerted when CVE-2024-22338 or the next vulnerability affects your stack