CVE-2022-32759CWE-613

IBM Security Directory Server information disclosure

Medium · published July 25, 2024

CVSS v3.1
5.3
EPSS
0%
Percentile
30.6
In the wild
Unconfirmed
What it is

IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 uses insufficient session expiration which could allow an unauthorized user to obtain sensitive information. IBM X-Force ID: 228565.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00378 · 30.6th percentile
Weakness
CWE-613 · Insufficient Session Expiration
Published
2024-07-25T17:11Z
EPSS history
Timeline
  • 25 JUL 17:11Z
    IBM Security Directory Server information disclosure
    cvelistv5