← back
CVE-2022-35646

IBM Security Verify Governance, Identity Manager security bypass

CVSS 5.9 MEDIUMEPSS 0.4%CWE-287
IBM Security Verify Governance, Identity Manager 10.0.1 software component could allow an authenticated user to modify or cancel any other user's access request using man-in-the-middle techniques. IBM X-Force ID: 231096.  
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:N
Affected products
IBM · Security Verify Governance, Identity Manager

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://exchange.xforce.ibmcloud.com/vulnerabilities/231096https://www.ibm.com/support/pages/node/6850809