CVE-2022-22386: Missing Encryption of Sensitive Data

🗓️ 17 Oct 2023 00:00:00Reported by Rapid7Type

IBM Security Verify Privilege On-Premises 11.5 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive...

Reporter	Title	Published	Views	Family All 12
IBM Security Bulletins	Security Bulletin: IBM Security Verify Privilege On-Premise is affected by multiple security vulnerabilities	5 Oct 202308:12	–	ibm
BDU FSTEC	The vulnerability of the software for automated, cloud-based, and on-premise administration of IBM Security Verify Privilege accounts lies in the lack of data encryption measures. This allows attackers to carry out “man-in-the-middle” attacks.	29 Nov 202300:00	–	bdu_fstec
Circl	CVE-2022-22386	17 Oct 202307:32	–	circl
CNNVD	IBM Security Verify Privilege Manager Security Vulnerability	17 Oct 202300:00	–	cnnvd
CVE	CVE-2022-22386	17 Oct 202301:08	–	cve
Cvelist	CVE-2022-22386 IBM Security Verify Privilege information disclosure	17 Oct 202301:08	–	cvelist
EUVD	EUVD-2022-27532	3 Oct 202520:07	–	euvd
NVD	CVE-2022-22386	17 Oct 202302:15	–	nvd
OSV	CVE-2022-22386	17 Oct 202302:15	–	osv
Prion	Information disclosure	17 Oct 202302:15	–	prion