CVE-2022-22377

CVSS V2 None CVSS V3 None

Description

IBM Security Verify Privilege On-Premises 11.5 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 221827.

Overview

CVE ID
CVE-2022-22377

Assigner
ibm

Vulnerability Status
PUBLISHED

Published Version
2023-10-17T00:36:36.434Z

Last Modified Date
2023-10-17T00:36:36.434Z

Weakness Enumerations

CWE	URL
CWE-311	http://cwe.mitre.org/data/definitions/311.html

References

Reference URL	Reference Tags
https://www.ibm.com/support/pages/node/7047202	vendor-advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/221827

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2022-22377
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-22377

History

Created	Old Value	New Value	Data Type	Notes
2024-06-24 18:05:43				Added to TrackCVE