Lucene search
IbmCVELIST:CVE-2022-22311HistoryMar 31, 2022 - 5:30 p.m.
CVE-2022-22311
2022-03-3117:30:17
ibm
www.cve.org
2
ibm security verify access
jwt tokens
validation
vulnerability
CVSS3
4.8
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C
AI Score
6.6
Confidence
High
EPSS
0.001
Percentile
41.1%
IBM Security Verify Access could allow a user, using man in the middle techniques, to obtain sensitive information or possibly change some information due to improper validiation of JWT tokens.
CNA Affected
[
{
"product": "Security Verify Access",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "10.0.0"
},
{
"status": "affected",
"version": "10.0.1"
},
{
"status": "affected",
"version": "10.0.2"
},
{
"status": "affected",
"version": "10.0.3"
}
]
}
]Related
prion
prion
Input validation
2022-03-31 18:15:00
ibm
ibm
cve
cve
CVE-2022-22311
2022-03-31 18:15:09
nvd
nvd
CVE-2022-22311
2022-03-31 18:15:09
CVSS3
4.8
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C
AI Score
6.6
Confidence
High
EPSS
0.001
Percentile
41.1%
Related for CVELIST:CVE-2022-22311