IBM Security Verify Privilege On-Premises 信息泄露漏洞

🗓️ 04 Mar 2024 00:00:00Reported by China National Vulnerability Database of Information SecurityType

cnnvd

cnnvd🔗 www.cnnvd.org.cn👁 1 Views

IBM Security Verify Privilege On-Premises 11.5 及更早版本存在信息泄露漏洞，因保护敏感信息不足，可通过 HTTP 请求泄露。

Reporter	Title	Published	Views	Family All 12
BDU FSTEC	The vulnerability of the software for automated, cloud-based, and on-premise administration of IBM Security Verify Privilege accounts stems from lack of access control mechanisms. This allows attackers to exploit the vulnerabilities to disclose protected information.	15 Mar 202400:00	–	bdu_fstec
Circl	CVE-2022-43890	4 Mar 202417:27	–	circl
CNVD	IBM Security Verify Privilege On-Premises Information Disclosure Vulnerability	6 Mar 202400:00	–	cnvd
CVE	CVE-2022-43890	4 Mar 202415:52	–	cve
Cvelist	CVE-2022-43890 IBM Security Verify Privilege On-Premises information disclosure	4 Mar 202415:52	–	cvelist
IBM Security Bulletins	Security Bulletin: IBM Security Verify Privilege On-Premises shows Application Error (CVE-2022-43890)	17 Jan 202410:29	–	ibm
EUVD	EUVD-2022-46860	3 Oct 202520:07	–	euvd
NVD	CVE-2022-43890	4 Mar 202416:15	–	nvd
Prion	Information disclosure	4 Mar 202416:15	–	prion
Positive Technologies	PT-2024-2129 · Ibm · Ibm Security Verify Privilege On-Premises	4 Mar 202400:00	–	ptsecurity

Source	Link
ibm	www.ibm.com/support/pages/node/7108660
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/240453
cxsecurity	www.cxsecurity.com/cveshow/CVE-2022-43890/

15 Jan 2026 00:00Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.15.3 - 7.5

EPSS0.00118

SSVC

信息泄露漏洞本地部署版本敏感信息保护不足 HTTP 请求利用