Описание
IBM Security Verify Governance 10.0.2 Identity Manager
uses a one-way cryptographic hash against an input that should not be reversible, such as a password, but the product does not also use a salt as part of the input.
Ссылки
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:ibm:security_verify_governance:10.0.2:*:*:*:*:*:*:*
EPSS
Процентиль: 2%
0.00013
Низкий
4.4 Medium
CVSS3
4.9 Medium
CVSS3
Дефекты
CWE-759
CWE-916
Связанные уязвимости
CVSS3: 4.4
github
около 1 года назад
IBM Security Verify Governance 10.0.2 Identity Manager uses a one-way cryptographic hash against an input that should not be reversible, such as a password, but the product does not also use a salt as part of the input.
EPSS
Процентиль: 2%
0.00013
Низкий
4.4 Medium
CVSS3
4.9 Medium
CVSS3
Дефекты
CWE-759
CWE-916