CVE Vulnerabilities

CVE-2023-35017

Cleartext Transmission of Sensitive Information

Published: Jan 29, 2025 | Modified: Mar 04, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

IBM Security Verify Governance 10.0.2 Identity Manager can transmit user credentials in clear text that could be obtained by an attacker using man in the middle techniques.

Weakness

The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

Affected Software

Name Vendor Start Version End Version
Security_verify_governance Ibm 10.0.2 (including) 10.0.2 (including)

Potential Mitigations

References