What is GHSA-f8jx-rxxw-rr7w?

GHSA-f8jx-rxxw-rr7w is a security advisory published by GitHub Security Advisories with Medium severity. IBM Security Verify Directory 10.0.0 through 10.0.4 and IBM Verify Directory 11.0.0 accepts GET...

Which CVE IDs does GHSA-f8jx-rxxw-rr7w cover?

GHSA-f8jx-rxxw-rr7w covers the following CVE IDs: CVE-2026-8860. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-f8jx-rxxw-rr7w?

GHSA-f8jx-rxxw-rr7w has a CVSS v3 base score of 6.5, published by GitHub Security Advisories.

GHSA-f8jx-rxxw-rr7wMediumCVSS 6.5

IBM Security Verify Directory 10.0.0 through 10.0.4 and IBM Verify Directory 11.0.0 accepts GET...

Vendor

GitHub Security Advisories

Published

November 8, 2026

Last Modified

November 8, 2026

🔗 CVE IDs covered (1)

CVE-2026-8860 →

📋 Description

IBM Security Verify Directory 10.0.0 through 10.0.4 and IBM Verify Directory 11.0.0 accepts GET requests for authentication, allowing credentials to be passed as URL parameters. This causes passwords to be exposed in browser history and server logs.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-8860
https://www.ibm.com/support/pages/node/7293828
https://github.com/advisories/GHSA-f8jx-rxxw-rr7w