Lucene search
HistoryOct 16, 2023 - 12:15 a.m.
CVE-2023-35018
ibm security verify governance
file validation
privilege escalation
ibm x-force
7.2 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
5.2 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
25.4%
IBM Security Verify Governance 10.0 could allow a privileged use to upload arbitrary files due to improper file validation. IBM X-Force ID: 259382.
Affected configurations
Node
ibmsecurity_verify_governanceRange10.0–10.0.2
Related
cve
cve
CVE-2023-35018
2023-10-16 00:15:10
cvelist
cvelist
CVE-2023-35018 IBM Security Verify Governance file upload
2023-10-15 23:46:49
prion
prion
Input validation
2023-10-16 00:15:00
7.2 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
5.2 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
25.4%
Related for NVD:CVE-2023-35018