CVE-2023-33837

CWE-319 — Cleartext TransmissionCWE-3113 documents3 sources
Severity
7.5HIGH
EPSS
0.0%
top 95.05%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Security Verify Governance
Timeline
PublishedOct 23

Description

IBM Security Verify Governance 10.0 does not encrypt sensitive or critical information before storage or transmission. IBM X-Force ID: 256020.

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:NExploitability: 0.5 | Impact: 3.6

Affected Packages2 packages

Patches

Patch: www.ibm.com ↗Patch: www.ibm.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-v994-7f87-hh83: IBM Security Verify Governance 10↗2023-10-23
▶
CVEList
IBM Security Verify Governance information disclosure↗2023-10-23
▶