Lucene search
IbmCVE-2022-22380HistoryOct 17, 2023 - 2:15 a.m.
CVE-2022-22380
2023-10-1702:15:10
CWE-295
ibm
web.nvd.nist.gov
37
ibm
security
verify
privilege
on-premises
cve-2022-22380
nvd
ibm x-force
221957
certificates
spoofing
CVSS3
5
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
AI Score
4.3
Confidence
High
EPSS
0
Percentile
13.1%
IBM Security Verify Privilege On-Premises 11.5 could allow an attacker to spoof a trusted entity due to improperly validating certificates. IBM X-Force ID: 221957.
Affected configurations
Node
ibmsecurity_verify_privilege_on-premisesRange<11.5
applemacosMatch-
ORmicrosoftwindowsMatch-
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Security Verify Privilege",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "11.5"
}
]
}
]Related
cvelist
cvelist
CVE-2022-22380 IBM Security Verify Privilege improper authentication
2023-10-17 01:25:30
prion
prion
Code injection
2023-10-17 02:15:00
nvd
nvd
CVE-2022-22380
2023-10-17 02:15:10
vulnrichment
vulnrichment
CVE-2022-22380 IBM Security Verify Privilege improper authentication
2023-10-17 01:25:30
CVSS3
5
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
AI Score
4.3
Confidence
High
EPSS
0
Percentile
13.1%
Related for CVE-2022-22380