Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-22312

Опубликовано: 27 апр. 2022
Источник: nvd
CVSS3: 5.7
CVSS3: 6.5
CVSS2: 4
EPSS Низкий

Описание

IBM Security Identity Manager (IBM Security Verify Password Synchronization Plug-in for Windows AD 10.x) is vulnerable to a denial of service, caused by a heap-based buffer overflow in the Password Synch Plug-in. An authenticated attacker could exploit this vulnerability to cause a denial of service. IBM X-Force ID: 217369.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:ibm:security_verify_password_synchronization:*:*:*:*:*:*:*:*
Версия от 6.0.0 (включая) до 10.0.4 (исключая)
cpe:2.3:a:microsoft:active_directory:-:*:*:*:*:*:*:*

EPSS

Процентиль: 68%
0.0057
Низкий

5.7 Medium

CVSS3

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 6.5
github
почти 4 года назад

IBM Security Identity Manager (IBM Security Verify Password Synchronization Plug-in for Windows AD 10.x) is vulnerable to a denial of service, caused by a heap-based buffer overflow in the Password Synch Plug-in. An authenticated attacker could exploit this vulnerability to cause a denial of service. IBM X-Force ID: 217369.

EPSS

Процентиль: 68%
0.0057
Низкий

5.7 Medium

CVSS3

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-787