Threats affecting pkg:maven/com.ibm/security_verify_directory

IBM Security Verify Directory versions 10.0.0 through 10.0.4 and 11.0.0 expose debug endpoints that reveal sensitive system information such as server versions and session identifiers. This exposure can aid attackers in identifying vulnerable software versions. The vulnerability is classified as CWE-200, indicating exposure of sensitive information to unauthorized actors. The CVSS score is 4.3, reflecting a medium severity level.