IBM Security Verify Directory 10.0.0-10.0.4, 11.0.0 Debug Info Disclosure
CVE-2026-8642 Published on November 8, 2026
IBM Verify Directory is affected by multiple vulnerabilities
IBM Security Verify Directory 10.0.0 through 10.0.4 and IBM Verify Directory 11.0.0 exposes debug endpoints that disclose system information including server versions and session identifiers. This information can be used to identify vulnerable software versions.
Vulnerability Analysis
CVE-2026-8642 is exploitable with network access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have a small impact on confidentiality, a small impact on integrity and availability.
Weakness Type
What is an Information Disclosure Vulnerability?
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
CVE-2026-8642 has been classified to as an Information Disclosure vulnerability or weakness.
Products Associated with CVE-2026-8642
stack.watch emails you whenever new vulnerabilities are published in IBM Security Verify Directory or IBM Verify Directory. Just hit a watch button to start following.
