← back
CVE-2023-32328

IBM Security Verify Access information disclosure

CVSS 7.5 HIGHEPSS 0.6%CWE-319
Vexday Risk Score
21Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 7.5EPSS 0.6%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado
Lifecycle
07 Feb 2024Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
IBM Security Verify Access 10.0.0.0 through 10.0.6.1 uses insecure protocols in some instances that could allow an attacker on the network to take control of the server. IBM X-Force Id: 254957.
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
IBM · Security Verify Access ApplianceIBM · Security Verify Access Docker

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://seclists.org/fulldisclosure/2024/Nov/0https://exchange.xforce.ibmcloud.com/vulnerabilities/254657https://www.ibm.com/support/pages/node/7106586