CVE-2022-33163

Опубликовано: 15 июн. 2023

Источник: nvd

CVSS3: 5.3

CVSS3: 8.1

EPSS Низкий

Описание

IBM Security Directory Suite VA 8.0.1 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. IBM X-Force ID: 228571.

Ссылки

https://exchange.xforce.ibmcloud.com/vulnerabilities/228571
VDB Entry
Vendor Advisory
https://www.ibm.com/support/pages/node/7001885
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/228571
VDB Entry
Vendor Advisory
https://www.ibm.com/support/pages/node/7001885
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ibm:security_directory_suite_va:8.0.1:*:*:*:*:*:*:*

EPSS

Процентиль: 9%

0.00032

Низкий

5.3 Medium

CVSS3

8.1 High

CVSS3

Дефекты

CWE-732

Связанные уязвимости

GHSA-wpvp-7q8c-xvg3

CVSS3: 5.3

github

больше 2 лет назад

IBM Security Directory Suite VA 8.0.1 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. IBM X-Force ID: 228571.

EPSS

Процентиль: 9%

0.00032

Низкий

5.3 Medium

CVSS3

8.1 High

CVSS3

Дефекты

CWE-732