5.3
Medium
CVE-2023-33836 IBM Security Verify Governance 10.0 contains hard-coded credentials, such as a password or cryptographic key, which it…
Description
IBM Security Verify Governance 10.0 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 256016.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Security Verify Governance | 10.0 | No fix stated |
Other CVEs of Security Verify Governance
The 19 CVEs of Security Verify Governance →
CVE-2024-22330
IBM Security Verify Governance 10.0.2 does not require that users should have strong passwords by default, which makes…
5.9
Medium
CVE-2023-33844
IBM Security Verify Governance 10.0.2 is vulnerable to cross-site scripting
5.4
Medium
CVE-2023-33838
IBM Security Verify Governance 10.0.2 Identity Manager uses a one-way cryptographic hash against an input that should…
4.4
Medium
CVE-2023-35017
IBM Security Verify Governance 10.0.2 Identity Manager can transmit user credentials in clear text that could be…
5.9
Medium