Vulnerability Name: | CVE-2022-22455 (CCN-224989) | ||||||||||||
Assigned: | 2022-08-16 | ||||||||||||
Published: | 2022-08-16 | ||||||||||||
Updated: | 2022-08-19 | ||||||||||||
Summary: | IBM Security Verify Governance Identity Manager 10.0 virtual appliance component performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses. IBM X-Force ID: 224989. | ||||||||||||
CVSS v3 Severity: | 9.8 Critical (CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) 8.5 High (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)
2.0 Low (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C)
| ||||||||||||
CVSS v2 Severity: | 1.7 Low (CCN CVSS v2 Vector: AV:L/AC:L/Au:S/C:P/I:N/A:N)
| ||||||||||||
Vulnerability Type: | CWE-noinfo | ||||||||||||
Vulnerability Consequences: | Gain Access | ||||||||||||
References: | Source: MITRE Type: CNA CVE-2022-22455 Source: XF Type: UNKNOWN ibm-sv-cve202222455-gain-access(224989) Source: XF Type: VDB Entry, Vendor Advisory ibm-sv-cve202222455-gain-access (224989) Source: CCN Type: IBM Security Bulletin 6612733 (Security Verify Governance) A security vulnerability has been fixed in IBM Security Verify Governance, Identity Manager virtual appliance component (CVE-2022-22455) Source: CONFIRM Type: Patch, Vendor Advisory https://www.ibm.com/support/pages/node/6612733 | ||||||||||||
Vulnerable Configuration: | Configuration 1: Configuration CCN 1: Denotes that component is vulnerable | ||||||||||||
BACK |