CVE-2022-22461CWE-327

IBM Security Verify Governance, Identity Manager information disclosure

Medium · published December 22, 2022

CVSS v3.1
5.9
EPSS
0%
Percentile
36.3
In the wild
Unconfirmed
What it is

IBM Security Verify Governance, Identity Manager 10.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 225007.

The record
Technical detail
CVSS v3.1
5.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00431 · 36.3th percentile
Weakness
CWE-327 · Use of a Broken or Risky Cryptographic Algorithm
Published
2022-12-22T19:39Z
EPSS history
Timeline
  • 22 DEC 19:39Z
    IBM Security Verify Governance, Identity Manager information disclosure
    cvelistv5