Lucene search
IbmCVELIST:CVE-2022-22457HistoryDec 22, 2022 - 9:20 p.m.
CVE-2022-22457 IBM Security Verify Governance, Identity Manager information disclosure
2022-12-2221:20:51
CWE-319
ibm
www.cve.org
5
ibm
security verify
governance
identity manager
information disclosure
plaintext storage
CVSS3
5.3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N
AI Score
4.8
Confidence
High
EPSS
0
Percentile
5.1%
IBM Security Verify Governance, Identity Manager 10.0.1 stores sensitive information including user credentials in plain clear text which can be read by a local privileged user. IBM X-Force ID: 225007.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Security Verify Governance, Identity Manager",
"vendor": "IBM",
"versions": [
{
"status": "affected",
"version": "10.0.1"
}
]
}
]Related
cnvd
cnvd
prion
prion
Design/Logic Flaw
2022-12-22 22:15:00
cve
cve
CVE-2022-22457
2022-12-22 22:15:12
nvd
nvd
CVE-2022-22457
2022-12-22 22:15:12
CVSS3
5.3
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N
AI Score
4.8
Confidence
High
EPSS
0
Percentile
5.1%
Related for CVELIST:CVE-2022-22457