What is CVE-2022-22380?

CVE-2022-22380 is a vulnerability in IBM Security Verify Privilege On-Premises that allows an attacker to spoof a trusted entity by improperly validating certificates.

What is the severity of CVE-2022-22380?

The severity of CVE-2022-22380 is medium.

How does CVE-2022-22380 affect IBM Security Verify Privilege On-Premises?

CVE-2022-22380 affects all versions of IBM Security Verify Privilege On-Premises.

How can an attacker exploit CVE-2022-22380?

An attacker can exploit CVE-2022-22380 by spoofing a trusted entity through improper certificate validation.

Is there a fix for CVE-2022-22380?

Yes, IBM has provided a fix for CVE-2022-22380. Please refer to the IBM Security Verify Privilege On-Premises support page for more information.

Vulnerability/
CVE-2022-22380

medium

CWE

295

5/10/2023

17/10/2023

13/9/2024

CVE-2022-22380: IBM Security Verify Privilege improper authentication

First published: Thu Oct 05 2023(Updated: )

IBM Security Verify Privilege On-Premises 11.5 could allow an attacker to spoof a trusted entity due to improperly validating certificates. IBM X-Force ID: 221957.

Credit: psirt@us.ibm.com psirt@us.ibm.com

Affected Software	Affected Version	How to fix
IBM Security Verify Privilege On-Premises	<11.5
Apple macOS
Microsoft Windows
	<=All

Remedy

https://www.ibm.com/support/pages/node/7047202

Never miss a vulnerability like this again

Reference Links

Parent vulnerabilities

(Appears in the following advisories)

IBM-7047202

Frequently Asked Questions

What is CVE-2022-22380?
CVE-2022-22380 is a vulnerability in IBM Security Verify Privilege On-Premises that allows an attacker to spoof a trusted entity by improperly validating certificates.
What is the severity of CVE-2022-22380?
The severity of CVE-2022-22380 is medium.
How does CVE-2022-22380 affect IBM Security Verify Privilege On-Premises?
CVE-2022-22380 affects all versions of IBM Security Verify Privilege On-Premises.
How can an attacker exploit CVE-2022-22380?
An attacker can exploit CVE-2022-22380 by spoofing a trusted entity through improper certificate validation.
Is there a fix for CVE-2022-22380?
Yes, IBM has provided a fix for CVE-2022-22380. Please refer to the IBM Security Verify Privilege On-Premises support page for more information.

collector/nvd-api
collector/nvd-index
agent/type
agent/references
agent/author
agent/first-publish-date
collector/mitre-cve
source/MITRE
agent/severity
agent/weakness
agent/title
agent/remedy
agent/last-modified-date
agent/tags
agent/softwarecombine
agent/event
agent/description
collector/ibm-support
source/IBM
agent/software-canonical-lookup
vendor/ibm
canonical/ibm security verify privilege on-premises
vendor/apple
canonical/apple macos
vendor/microsoft
canonical/microsoft windows
version/ibm security verify privilege on-premises/all

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.