IBM Security Verify Privilege information disclosure
CVE-2022-22377

5.3MEDIUM

Key Information:

Vendor

IBM
Status
Security Verify Privilege
Vendor
CVE Published:
17 October 2023

What is CVE-2022-22377?

IBM Security Verify Privilege On-Premises 11.5 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 221827.

Affected Version(s)

Security Verify Privilege 11.5

References

https://www.ibm.com/support/pages/node/7047202
vendor-advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/221827

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.