CVE-2023-35017
IBM Security Verify Governance information
- State
- Published
- Severity
- 5.9 Medium
- Published
- Jan 29, 2025
- Updated
- Jan 29, 2025
- Reserved
- Jun 11, 2023
Description
IBM Security Verify Governance 10.0.2 Identity Manager can transmit user credentials in clear text that could be obtained by an attacker using man in the middle techniques.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 5.9 Medium | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N | ibm |
Weaknesses
- CWE-319 Cleartext Transmission of Sensitive Information
Affected Products
| Product | Versions |
|---|---|
Security Verify GovernanceIBM |
|
References
- https://www.ibm.com/support/pages/node/7172423vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.