by Kastro
Paper/Archive/CVE-2023-32328

CVE-2023-32328

IBM Security Verify Access Appliance — IBM Security Verify Access information disclosure

EPSS 0.6%CVSS 9.8
critical.is priorityof 100
39
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 47.6.476 × 209.5No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

IBM Security Verify Access 10.0.0.0 through 10.0.6.1 uses insecure protocols in some instances that could allow an attacker on the network to take control of the server. IBM X-Force Id: 254957.

Affected

ProductAffectedFixed inSource
Security Verify Access Appliance10.0.0.0 – 10.0.6.1–CNA
Security Verify Access Docker10.0.0.0 – 10.0.6.1–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
ibm (CNA)7.5CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

advisoryibm.com/support/pages/node/7106586refexchange.xforce.ibmcloud.com/vulnerabilities/254657refseclists.org/fulldisclosure/2024/Nov/0