IBM Security Verify Access versions 10.0 through 10.0.9.2, IBM Verify Identity Access versions 11.0 through 11.0.3, and IBM Verify Identity Access Container 11.0 through 11.0.3 Reverse Proxy in certain configurations have a vulnerability where cryptographic validation of user-supplied data is weaker than expected. This improper authentication issue (CWE-287) can potentially allow unauthorized access by bypassing authentication controls. The CVSS v3.1 score is 7.4 (high), reflecting network attack vector, high attack complexity, no privileges required, no user interaction, unchanged scope, and high impact on confidentiality and integrity but no impact on availability.

Successful exploitation could lead to unauthorized access due to improper authentication validation, compromising confidentiality and integrity of the affected systems. There is no known exploitation in the wild at this time. The vulnerability does not impact availability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary mitigation has been documented in the provided information. Users should monitor IBM advisories for updates and apply patches or configuration changes as recommended once available.