CVE-2023-35017

EPSS 0.01%
Veröffentlicht 29.01.2025 00:15:07
Zuletzt bearbeitet 04.03.2025 21:58:37
Quelle psirt@us.ibm.com
Teams Watchlist Login
Unerledigt Login

IBM Security Verify Governance 10.0.2 Identity Manager can transmit user credentials in clear text that could be obtained by an attacker using man in the middle techniques.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Ibm ≫ Security Verify Governance Version10.0.2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.01%	0.008

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
psirt@us.ibm.com	5.9	2.2	3.6	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-319 Cleartext Transmission of Sensitive Information

The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

https://www.ibm.com/support/pages/node/7172423

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2023-35017

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2023-35017

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2023-35017

EUVD