CVE-2022-35646CWE-287

IBM Security Verify Governance, Identity Manager security bypass

Medium · published December 22, 2022

CVSS v3.1
5.9
EPSS
0%
Percentile
31.9
In the wild
Unconfirmed
What it is

IBM Security Verify Governance, Identity Manager 10.0.1 software component could allow an authenticated user to modify or cancel any other user's access request using man-in-the-middle techniques. IBM X-Force ID: 231096.

The record
Technical detail
CVSS v3.1
5.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00390 · 31.9th percentile
Weakness
CWE-287 · Improper Authentication
Published
2022-12-22T19:08Z
EPSS history
Timeline
  • 22 DEC 19:08Z
    IBM Security Verify Governance, Identity Manager security bypass
    cvelistv5