CVE-2023-35017
IBM Security Verify Governance information
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 5.9EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado
Lifecycle
29 Jan 2025Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
IBM Security Verify Governance 10.0.2 Identity Manager can transmit user credentials in clear text that could be obtained by an attacker using man in the middle techniques.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
IBM · Security Verify GovernanceWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →