{"id":"CVE-2023-25927","aliases":["EUVD-2023-29815","GHSA-cgqm-2q6p-33gm"],"status":"published","title":"IBM Security Verify Access denial of service","description":"IBM Security Verify Access 10.0.0, 10.0.1, 10.0.2, 10.0.3, 10.0.4, and 10.0.5 could allow an attacker to crash the webseald process using specially crafted HTTP requests resulting in loss of access to the system.  IBM X-Force ID:  247635.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.01485,"percentile":0.74227,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20"],"published":"2023-05-12T17:38:51Z","modified":"2026-06-17T05:42:16Z","products":[{"vendor":"ibm","product":"security verify access"},{"vendor":"ibm","product":"security_verify_access"}],"references":[{"url":"https://https://www.ibm.com/support/pages/node/6989653","tags":["vendor-advisory","x_transferred","Broken Link"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/247635","tags":["vdb-entry","x_transferred","VDB Entry","Vendor Advisory"]},{"url":"http://seclists.org/fulldisclosure/2024/Nov/1"},{"url":"http://seclists.org/fulldisclosure/2024/Nov/0"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-25927"},{"url":"https://www.ibm.com/support/pages/node/6989653?_ga=2.22490043.1644592052.1684753176-785517468.1677620719","tags":["Vendor Advisory"]},{"url":"https://github.com/advisories/GHSA-cgqm-2q6p-33gm"}],"sources":{"cve":[{"id":"CVE-2023-25927","title":"IBM Security Verify Access denial of service","description":"IBM Security Verify Access 10.0.0, 10.0.1, 10.0.2, 10.0.3, 10.0.4, and 10.0.5 could allow an attacker to crash the webseald process using specially crafted HTTP requests resulting in loss of access to the system.  IBM X-Force ID:  247635.","status":"published","published":"2023-05-12T17:38:51.966Z","modified":"2025-11-03T21:47:28.686Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:35:19.959682Z"}],"euvd":[{"id":"EUVD-2023-29815","description":"IBM Security Verify Access 10.0.0, 10.0.1, 10.0.2, 10.0.3, 10.0.4, and 10.0.5 could allow an attacker to crash the webseald process using specially crafted HTTP requests resulting in loss of access to the system.  IBM X-Force ID:  247635.","status":"published","published":"2023-05-12T17:38:51Z","modified":"2025-11-03T21:47:28Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"updated_at":"2026-11-02T19:49:31.25882Z"}],"ghsa":[{"id":"GHSA-cgqm-2q6p-33gm","title":"IBM Security Verify Access 10.0.0, 10.0.1, 10.0.2, 10.0.3, 10.0.4, and 10.0.5 could allow an...","description":"IBM Security Verify Access 10.0.0, 10.0.1, 10.0.2, 10.0.3, 10.0.4, and 10.0.5 could allow an attacker to crash the webseald process using specially crafted HTTP requests resulting in loss of access to the system.  IBM X-Force ID:  247635.","status":"published","published":"2023-05-12T18:30:25Z","modified":"2025-11-04T00:31:42Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T15:04:28.99549Z"}],"nvd":[{"id":"CVE-2023-25927","description":"IBM Security Verify Access 10.0.0, 10.0.1, 10.0.2, 10.0.3, 10.0.4, and 10.0.5 could allow an attacker to crash the webseald process using specially crafted HTTP requests resulting in loss of access to the system.  IBM X-Force ID:  247635.","status":"published","published":"2023-05-12T18:15:09.45Z","modified":"2026-06-17T05:42:16.42Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:08:02.399327Z"}]}}
