IBM Security Verify Privilege improper authentication
CVE-2022-22380

5MEDIUM

Key Information:

Vendor

IBM
Status
Security Verify Privilege
Vendor
CVE Published:
17 October 2023

What is CVE-2022-22380?

IBM Security Verify Privilege On-Premises 11.5 could allow an attacker to spoof a trusted entity due to improperly validating certificates. IBM X-Force ID: 221957.

Affected Version(s)

Security Verify Privilege 11.5

References

https://www.ibm.com/support/pages/node/7047202
vendor-advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/221957
vdb-entry

CVSS V3.1

Score:
5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.