Weak Password Policy in IBM Security Verify Governance Affects User Account Security

CVE-2024-22330

What is CVE-2024-22330?

IBM Security Verify Governance version 10.0.2 has a significant issue regarding its default password policy, as it does not enforce the use of strong passwords. This oversight enables attackers to exploit weak passwords, potentially leading to unauthorized access to user accounts. Organizations should be aware of this vulnerability and take immediate steps to enforce a robust password policy to protect their sensitive information and user accounts against unauthorized access.

References