PT-2023-8374 · Ibm · Ibm Security Verify Governance
CVE-2023-33837
·
Publicado
2023-10-23
·
Atualizado
2024-09-19
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
IBM Security Verify Governance version 10.0
Description
The issue is caused by the lack of encryption for sensitive data. This could allow a remote attacker to disclose protected information.
Recommendations
For IBM Security Verify Governance version 10.0, consider implementing encryption for sensitive or critical information before storage or transmission as a temporary workaround until a patch is available. Restrict access to sensitive data to minimize the risk of exploitation.
Correção
Cleartext Transmission of Sensitive Information
Missing Encryption of Sensitive Data
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Ibm Security Verify Governance