CVE-2022-33160

CWE-757CWE-327 — Broken Cryptographic Algorithm3 documents3 sources
Severity
7.5HIGH
EPSS
0.0%
top 90.80%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
IBM Security Directory SuiteIBM Security Directory Suite VA
Timeline
PublishedOct 6
Latest updateOct 7

Description

IBM Security Directory Suite 8.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 228568.

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:NExploitability: 2.2 | Impact: 1.4

Affected Packages2 packages

Patches

Patch: www.ibm.com ↗Patch: www.ibm.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-c9wm-h66h-5r4v: IBM Security Directory Suite 8↗2023-10-07
▶
CVEList
IBM Security Directory Suite information disclosure↗2023-10-06
▶
CVE-2022-33160 (HIGH CVSS 7.5) | IBM Security Directory Suite 8.0.1 | cvebase.io