Lucene search
HistoryOct 17, 2023 - 2:15 a.m.
CVE-2022-22380
ibm
security
verify
privilege
on-premises
cve-2022-22380
nvd
ibm x-force
221957
certificates
spoofing
5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
4.3 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
13.1%
IBM Security Verify Privilege On-Premises 11.5 could allow an attacker to spoof a trusted entity due to improperly validating certificates. IBM X-Force ID: 221957.
Affected configurations
Node
ibmsecurity_verify_privilege_managerMatch11.5
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | security_verify_privilege_manager | 11.5 | cpe:2.3:a:ibm:security_verify_privilege_manager:11.5:*:*:*:*:*:*:* |
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Security Verify Privilege",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "11.5"
}
]
}
]Related
cvelist
cvelist
CVE-2022-22380 IBM Security Verify Privilege improper authentication
2023-10-17 01:25:30
nvd
nvd
CVE-2022-22380
2023-10-17 02:15:10
prion
prion
Code injection
2023-10-17 02:15:00
5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
4.3 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
13.1%
Related for CVE-2022-22380