CVE-2022-35287

IBM Security Verify Information Queue 10.0.2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 230817...

CVE-2022-35287

IBM Security Verify Information Queue (ISIQ) v10.0.2 is affected by CVE-2022-35287 due to hard-coded credentials used for inbound authentication, outbound communication, or internal data encryption. The vulnerability stems from configuration files containing passwords or cryptographic keys, expos...

Security Bulletin: IBM Security Verify Information Queue distributes configuration files with hard-coded credentials (CVE-2022-35287)

Summary IBM Security Verify Information Queue ISIQ v10.0.2 includes YAML files and property files with hard-coded credentials. ISIQ v10.0.3 has removed these files from the installation package since they are not required for product operation. CVE-2022-35287 Vulnerability Details...