5.9
Moyenne
CVE-2023-35888 IBM Security Verify Governance 10.0.2 could allow a remote attacker to obtain sensitive information, caused by the…
Description
IBM Security Verify Governance 10.0.2 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 258375.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Security Verify Governance | 10.0.2 | Pas de correctif indiqué |
| security_verify_governance | 10.0.2 | Pas de correctif indiqué |
Autres CVE de Security Verify Governance
Les 19 CVE de Security Verify Governance →
CVE-2024-22330
IBM Security Verify Governance 10.0.2 does not require that users should have strong passwords by default, which makes…
5.9
Moyenne
CVE-2023-33844
IBM Security Verify Governance 10.0.2 is vulnerable to cross-site scripting
5.4
Moyenne
CVE-2023-33838
IBM Security Verify Governance 10.0.2 Identity Manager uses a one-way cryptographic hash against an input that should…
4.4
Moyenne
CVE-2023-35017
IBM Security Verify Governance 10.0.2 Identity Manager can transmit user credentials in clear text that could be…
5.9
Moyenne