IBM Security Verify Bridge Information Disclosure Vulnerability (CNVD-2021-77467)

IBM Security Verify Bridge is an IBM application component of International Business Machines (IBM), Inc. Provides IBM Cloud access to user attributes and authentication that are controlled by the customer’s local LDAP or Active Directory.IBM Security Verify Bridge is vulnerable to an information disclosure vulnerability that stems from IBM Security Verify Bridge 1.0. 5.0 does not properly validate certificates, and a local attacker could exploit the vulnerability to obtain sensitive information for further attacks on the system.