PT-2023-8374 · Ibm · Ibm Security Verify Governance

CVE-2023-33837

·

Publicado

2023-10-23

·

Atualizado

2024-09-19

CVSS v2.0

7.8

Alta

VetorAV:N/AC:L/Au:N/C:C/I:N/A:N
Name of the Vulnerable Software and Affected Versions IBM Security Verify Governance version 10.0
Description The issue is caused by the lack of encryption for sensitive data. This could allow a remote attacker to disclose protected information.
Recommendations For IBM Security Verify Governance version 10.0, consider implementing encryption for sensitive or critical information before storage or transmission as a temporary workaround until a patch is available. Restrict access to sensitive data to minimize the risk of exploitation.

Correção

Cleartext Transmission of Sensitive Information

Missing Encryption of Sensitive Data

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2024-00570
CVE-2023-33837

Produtos afetados

Ibm Security Verify Governance