CVE-2022-43892CWE-295
IBM Security Verify Privilege information disclosure
Low · published October 17, 2023
What it is
IBM Security Verify Privilege On-Premises 11.5 does not validate, or incorrectly validates, a certificate which could disclose sensitive information which could aid further attacks against the system. IBM X-Force ID: 240455.
The record
Technical detail
- CVSS v3.1
- 3.7 · LOW
- Vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00300 · 21.5th percentile
- Weakness
- CWE-295 · Improper Certificate Validation
- Published
- 2023-10-17T02:00Z
EPSS history
Timeline