CVE-2022-22458
published 2022-12-22CVE-2022-22458: IBM Security Verify Governance, Identity Manager 10.0.1 stores user credentials in plain clear text which can be read by a remote authenticated user. IBM…
PriorityP335medium6.5CVSS 3.1
AVNACLPRLUINSUCHINAN
EPSS
0.77%
51.3th percentile
IBM Security Verify Governance, Identity Manager 10.0.1 stores user credentials in plain clear text which can be read by a remote authenticated user. IBM X-Force ID: 225009.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ibm | security_verify_governance | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-gw73-p994-r83w: IBM Security Verify Governance, Identity Manager 10
ghsa_unreviewed·2022-12-23
CVE-2022-22458 [MEDIUM] CWE-522 GHSA-gw73-p994-r83w: IBM Security Verify Governance, Identity Manager 10
IBM Security Verify Governance, Identity Manager 10.0.1 stores user credentials in plain clear text which can be read by a remote authenticated user. IBM X-Force ID: 225009.
Ivanti
Ivanti Security Advisory: CVE-2025-22458
vendor_ivanti·2025-04-08·CVSS 7.8
CVE-2025-22458 [HIGH] CWE-427 Ivanti Security Advisory: CVE-2025-22458
Ivanti Security Advisory: CVE-2025-22458
DLL hijacking in Ivanti Endpoint Manager before version 2024 SU1 or before version 2022 SU7 allows an authenticated attacker to escalate to System.
CVE IDs: CVE-2025-22458
CVSS Base Score: 7.8
Severity: HIGH
CWEs: CWE-427
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-12-22
Published