IBM Security verify Access Appliance Security Vulnerability

IBM Security Verify Access (ISAM) is a service from International Business Machines (IBM) that improves user access security. The service enables secure and simple access to platforms such as web, mobile, IoT and cloud technologies through the use of risk-based access, single sign-on, integrated access management controls, identity federation, and mobile multi-factor authentication. An unspecified vulnerability exists in the IBM Security verify Access Appliance that stems from a lack of certificate validation and can be exploited by an attacker to conduct a man-in-the-middle attack when deploying open source scripts.