PT-2024-11578

CVE-2022-32756

Published

2024-03-22

Updated

2024-04-01

Description by

CVSS 3.1

2.7

Low

MetricsAV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Security Verify Directory version 10.0.0

Description The issue allows a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.

Recommendations For IBM Security Verify Directory version 10.0.0, upgrade immediately to a newer version to secure your data. As a temporary workaround, consider restricting access to detailed technical error messages to minimize the risk of exploitation.

Exploitability

Fix

Impacts

Researchers