5.9
Medium
CVE-2023-35017 IBM Security Verify Governance 10.0.2 Identity Manager can transmit user credentials in clear text that could be…
Description
IBM Security Verify Governance 10.0.2 Identity Manager can transmit user credentials in clear text that could be obtained by an attacker using man in the middle techniques.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Security Verify Governance | 10.0.2 | No fix stated |
Other CVEs of Security Verify Governance
The 19 CVEs of Security Verify Governance →
CVE-2024-22330
IBM Security Verify Governance 10.0.2 does not require that users should have strong passwords by default, which makes…
5.9
Medium
CVE-2023-33844
IBM Security Verify Governance 10.0.2 is vulnerable to cross-site scripting
5.4
Medium
CVE-2023-33838
IBM Security Verify Governance 10.0.2 Identity Manager uses a one-way cryptographic hash against an input that should…
4.4
Medium
CVE-2023-35888
IBM Security Verify Governance 10.0.2 could allow a remote attacker to obtain sensitive information, caused by the…
5.9
Medium