CVE-2022-22380: IBM Security Verify Privilege improper authentication
IBM Security Verify Privilege On-Premises 11.5 could allow an attacker to spoof a trusted entity due to improperly validating certificates. IBM X-Force ID: 221957.
Other sources
IBM Security Verify Privilege On-Premises could allow an attacker to spoof a trusted entity due to improperly validating certificates.
— IBM
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2022-22380?
CVE-2022-22380 is a vulnerability in IBM Security Verify Privilege On-Premises that allows an attacker to spoof a trusted entity by improperly validating certificates.
What is the severity of CVE-2022-22380?
The severity of CVE-2022-22380 is medium.
How does CVE-2022-22380 affect IBM Security Verify Privilege On-Premises?
CVE-2022-22380 affects all versions of IBM Security Verify Privilege On-Premises.
How can an attacker exploit CVE-2022-22380?
An attacker can exploit CVE-2022-22380 by spoofing a trusted entity through improper certificate validation.
Is there a fix for CVE-2022-22380?
Yes, IBM has provided a fix for CVE-2022-22380. Please refer to the IBM Security Verify Privilege On-Premises support page for more information.