IBM Verify Identity Access Container and IBM Security Verify Access Container versions specified use cryptographic algorithms that are weaker than expected. This cryptographic weakness could enable an attacker with network access and low privileges to decrypt sensitive data. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity impact primarily on confidentiality. No official remediation or patch information is currently available from IBM, and the product is not a cloud service, so remediation depends on vendor updates or configuration changes.

The vulnerability could lead to unauthorized decryption of highly sensitive information, impacting confidentiality. There is no indication of impact on integrity or availability. The attack vector is network-based with low attack complexity and requires low privileges but no user interaction. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation is currently documented, users should monitor IBM advisories for updates. Until a patch is available, consider reviewing cryptographic configurations and limiting network exposure of affected components where possible.