CVE-2023-32328

Опубликовано: 07 фев. 2024

Источник: nvd

CVSS3: 7.5

CVSS3: 9.8

EPSS Низкий

Описание

IBM Security Verify Access 10.0.0.0 through 10.0.6.1 uses insecure protocols in some instances that could allow an attacker on the network to take control of the server. IBM X-Force Id: 254957.

Ссылки

https://exchange.xforce.ibmcloud.com/vulnerabilities/254657
VDB Entry
Vendor Advisory
https://www.ibm.com/support/pages/node/7106586
Patch
Vendor Advisory
http://seclists.org/fulldisclosure/2024/Nov/0
https://exchange.xforce.ibmcloud.com/vulnerabilities/254657
VDB Entry
Vendor Advisory
https://www.ibm.com/support/pages/node/7106586
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ibm:security_verify_access:*:*:*:*:*:*:*:*

Версия от 10.0.0.0 (включая) до 10.0.6.1 (включая)

EPSS

Процентиль: 9%

0.00032

Низкий

7.5 High

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-319

Связанные уязвимости

GHSA-gp9c-7r9h-x95g

CVSS3: 7.5

github

почти 2 года назад

IBM Security Verify Access 10.0.0.0 through 10.0.6.1 uses insecure protocols in some instances that could allow an attacker on the network to take control of the server. IBM X-Force Id: 254957.

EPSS

Процентиль: 9%

0.00032

Низкий

7.5 High

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-319