by Kastro
Paper/Archive/CVE-2024-22330

CVE-2024-22330

IBM Security Verify Governance — IBM Security Verify Governance information disclosure

EPSS 0.3%CVSS 9.8
critical.is priorityof 100
35
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 25.7.257 × 205.1No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

IBM Security Verify Governance 10.0.2 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts.

Affected

ProductAffectedFixed inSource
Security Verify Governance10.0.2–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
ibm (CNA)5.9CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial

References

patchibm.com/support/pages/node/7235779