CVE-2023-33836

published 2023-10-16

CVE-2023-33836: IBM Security Verify Governance 10.0 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication…

critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

IBM Security Verify Governance 10.0 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 256016.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
ibm	security_verify_governance	—	—
ibm	security_verify_governance	>= 10.0 < 10.0.2	10.0.2

CWE-798