PT-2022-15446

CVE-2022-22458

·

Published

2022-12-22

·

Updated

2022-12-28

Description by

CVSS 3.1
6.5
Medium
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions IBM Security Verify Governance, Identity Manager version 10.0.1
Description The issue allows a remote authenticated user to read user credentials stored in plain clear text.
Recommendations For IBM Security Verify Governance, Identity Manager version 10.0.1, consider restricting access to sensitive areas of the system to minimize the risk of exploitation until a fix is available. As a temporary workaround, limit the privileges of remote authenticated users to reduce the potential impact.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾