Weaker Cryptographic Algorithms in IBM Security Verify Directory 10.0.0 Could Leave Sensitive Information Vulnerable to Decryption
CVE-2022-32753
4.5MEDIUM
Summary
IBM Security Verify Directory 10.0.0 is reported to utilize cryptographic algorithms that do not meet expected security standards. This weakness can potentially enable unauthorized entities to decrypt sensitive data and compromise the confidentiality of user information. The vulnerability highlights the importance of implementing robust cryptographic measures to protect against potential breaches. Users of IBM Security Verify Directory should review their security protocols and consider applying any recommended patches or updates to mitigate risks associated with this vulnerability.
Affected Version(s)
Security Verify Directory 10.0.0
References
CVSS V3.1
Score:
4.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved