Security Bulletin: IBM Security Verify Privilege On-Premises shows Application Error (CVE-2022-43890)

Summary

IBM Security Verify Privilege On-Premises has remediated several vulnerabilities in which internal product details were being disclosed that could be exploited for harmful attacks.

Vulnerability Details

CVEID:CVE-2022-43890
**DESCRIPTION:**IBM Security Verify Privilege On-Premises could disclose sensitive information through an HTTP request that could aid an attacker in further attacks against the system.
CVSS Base score: 5.3
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/240453 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)

Affected Products and Versions

Remediation/Fixes

IBM encourages customers to update their systems promptly.

Fixed in 11.5 version onward.

https://www.ibm.com/support/fixcentral/swg/downloadFixes?parent=ibm%7ETivoli&product=ibm/Tivoli/IBM+Security+Secret+Server&release=All&platform=All&function=fixId&fixids=11.5-ISV-PV-11.5.000002&includeRequisites=1&includeSupersedes=0&downloadMethod=ddp

Workarounds and Mitigations

None