4.1
Medium
CVE-2023-33837 IBM Security Verify Governance 10.0 does not encrypt sensitive or critical information before storage or transmission
Description
IBM Security Verify Governance 10.0 does not encrypt sensitive or critical information before storage or transmission. IBM X-Force ID: 256020.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Security Verify Governance | 10.0 | No fix stated |
Other CVEs of Security Verify Governance
The 19 CVEs of Security Verify Governance →
CVE-2024-22330
IBM Security Verify Governance 10.0.2 does not require that users should have strong passwords by default, which makes…
5.9
Medium
CVE-2023-33844
IBM Security Verify Governance 10.0.2 is vulnerable to cross-site scripting
5.4
Medium
CVE-2023-33838
IBM Security Verify Governance 10.0.2 Identity Manager uses a one-way cryptographic hash against an input that should…
4.4
Medium
CVE-2023-35017
IBM Security Verify Governance 10.0.2 Identity Manager can transmit user credentials in clear text that could be…
5.9
Medium