Lucene search
+L

1161 matches found

OSV
OSV
added 2025/01/29 12:15 a.m.11 views

CVE-2023-35017

IBM Security Verify Governance 10.0.2 Identity Manager can transmit user credentials in clear text that could be obtained by an attacker using man in the middle techniques...

5.9CVSS5.8AI score0.0023EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/29 12:0 a.m.66 views

CVE-2023-35017

IBM Security Verify Governance Identity Manager (ISVG) 10.0.2 is affected by CVE-2023-35017, where user credentials can be transmitted in clear text over the network, potentially exposed to attackers via man-in-the-middle. The issue is addressed in IBM’s remediation with fix packs: 10.0.2.0-ISS-I...

5.9CVSS5.6AI score0.0023EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/01/29 12:0 a.m.17 views

CVE-2023-35017 IBM Security Verify Governance information

IBM Security Verify Governance 10.0.2 Identity Manager can transmit user credentials in clear text that could be obtained by an attacker using man in the middle techniques...

5.9CVSS6.6AI score0.0023EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/29 12:0 a.m.33 views

CVE-2023-35017 IBM Security Verify Governance information

IBM Security Verify Governance 10.0.2 Identity Manager can transmit user credentials in clear text that could be obtained by an attacker using man in the middle techniques...

5.9CVSS0.0023EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/01/29 12:0 a.m.5 views

IBM Security Verify Governance 安全漏洞

IBM Security Verify Governance is an intelligent identity access platform from International Business Machines IBM, Inc. provides organizations with a platform to analyze, define and control user access and access risk. IBM Security Verify Governance suffers from a security vulnerability that ste...

4.9CVSS6.4AI score0.00231EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2025/01/28 10:8 p.m.25 views

Security Bulletin: A Security Vulnerability was discovered in IBM Security Verify Access (CVE-2024-45678)

Summary A Security Vulnerability was addressed in IBM Security Verify Access regarding Yubico Yubikey 5 Series. Vulnerability Details CVEID:CVE-2024-45678 DESCRIPTION: Yubico YubiKey 5 Series, Security Key Series and YubiHSM 2 could allow a physical attacker to obtain sensitive information, cause...

4.2CVSS6.3AI score0.00329EPSS
SaveExploits0Affected Software1
CNNVD
CNNVD
added 2025/01/27 12:0 a.m.6 views

IBM Security Directory Integrator和IBM Security Verify Directory Integrator 安全漏洞

IBM Security Directory Integrator and IBM Security Verify Directory Integrator are both products of International Business Machines IBM.IBM Security Directory Integrator is an integrated development environment and runtime service. IBM Security Verify Directory Integrator is software for...

7.5CVSS6.1AI score0.00303EPSS
SaveExploits0References1
OSV
OSV
added 2025/01/23 6:15 p.m.8 views

CVE-2024-45672

IBM Security Verify Bridge 1.0.0 through 1.0.15 could allow a local privileged user to overwrite files due to excessive privileges granted to the agent. which could also cause a denial of service...

6CVSS5.8AI score0.00142EPSS
SaveExploits0References1
NVD
NVD
added 2025/01/23 6:15 p.m.23 views

CVE-2024-45672

IBM Security Verify Bridge 1.0.0 through 1.0.15 could allow a local privileged user to overwrite files due to excessive privileges granted to the agent. which could also cause a denial of service...

6CVSS0.00142EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/23 5:31 p.m.14 views

CVE-2024-45672 IBM Security Verify Bridge data manipulation

IBM Security Verify Bridge 1.0.0 through 1.0.15 could allow a local privileged user to overwrite files due to excessive privileges granted to the agent. which could also cause a denial of service...

6CVSS5.8AI score0.00142EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/01/23 5:31 p.m.29 views

CVE-2024-45672 IBM Security Verify Bridge data manipulation

IBM Security Verify Bridge 1.0.0 through 1.0.15 could allow a local privileged user to overwrite files due to excessive privileges granted to the agent. which could also cause a denial of service...

6CVSS0.00142EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/23 5:31 p.m.67 views

CVE-2024-45672

CVE-2024-45672 affects IBM Security Verify Bridge versions 1.0.0–1.0.15. The issue arises from excessive privileges granted to the agent, enabling a local privileged user to overwrite files and potentially cause a denial of service (CWE-471). The vulnerability is described with a CVSSv3.1 base sc...

6CVSS5.8AI score0.00142EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2025/01/20 3:15 p.m.26 views

CVE-2024-45647

IBM Security Verify Access 10.0.0 through 10.0.8 and IBM Security Verify Access Docker 10.0.0 through 10.0.8 could allow could an unverified user to change the password of an expired user without prior knowledge of that password...

9.8CVSS0.00259EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/20 2:50 p.m.104 views

CVE-2024-45647

IBM Security Verify Access (versions 10.0.0–10.0.8) and IBM Security Verify Access Docker (10.0.0–10.0.8) are affected by CVE-2024-45647, which allows an unauthenticated or unverified user to change the password of an expired user without the password. The underlying issue is CWE-620 (Unverified ...

9.8CVSS5.5AI score0.00259EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2025/01/20 2:50 p.m.31 views

CVE-2024-45647 IBM Security Verify Access unverified password change

IBM Security Verify Access 10.0.0 through 10.0.8 and IBM Security Verify Access Docker 10.0.0 through 10.0.8 could allow could an unverified user to change the password of an expired user without prior knowledge of that password...

5.6CVSS0.00259EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/01/20 2:50 p.m.16 views

CVE-2024-45647 IBM Security Verify Access unverified password change

IBM Security Verify Access 10.0.0 through 10.0.8 and IBM Security Verify Access Docker 10.0.0 through 10.0.8 could allow could an unverified user to change the password of an expired user without prior knowledge of that password...

5.6CVSS6.8AI score0.00259EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/01/20 12:0 a.m.7 views

IBM Security Verify Access 安全漏洞

IBM Security Verify Access ISAM is a service from International Business Machines IBM that improves user access security. A security vulnerability exists in IBM Security Verify Access versions 10.0.0 through 10.0.8, which stems from a vulnerability that could allow an unauthenticated user to chan...

9.8CVSS6.5AI score0.00259EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/12/23 12:0 a.m.8 views

The vulnerability of the software protection tool for accessing applications in Docker environments. IBM Security Verify Access Docker, which is related to errors in privilege management, allows attackers to elevate their privileges.

The vulnerability of the application access protection software in Docker environments is related to errors in privilege management. Exploiting this vulnerability can allow attackers to enhance their privileges...

7.8CVSS7.7AI score0.00228EPSS
SaveExploits1References3Affected Software1
NVD
NVD
added 2024/12/19 2:15 a.m.25 views

CVE-2024-35141

IBM Security Verify Access Docker 10.0.0 through 10.0.6 could allow a local user to escalate their privileges due to execution of unnecessary privileges...

7.8CVSS0.00228EPSS
SaveExploits1References2
OSV
OSV
added 2024/12/19 2:15 a.m.4 views

CVE-2024-35141

IBM Security Verify Access Docker 10.0.0 through 10.0.6 could allow a local user to escalate their privileges due to execution of unnecessary privileges...

7.8CVSS7.4AI score0.00228EPSS
SaveExploits1References2
Rows per page
Query Builder