CVE-2022-33159: IBM Security Directory Suite VA information disclosure
First published: Tue May 30 2023(Updated: )
IBM Security Directory Server stores user credentials in plain clear text which can be read by an authenticated user.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Security Directory Suite VA | <=8.0.1-8.0.1.19 | |
| IBM Security Directory Suite VA | >=8.0.1<=8.0.1.19 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this IBM Security Directory Server vulnerability?
The vulnerability ID for this IBM Security Directory Server vulnerability is CVE-2022-33159.
What is the severity of CVE-2022-33159?
The severity of CVE-2022-33159 is medium.
Which IBM product is affected by CVE-2022-33159?
IBM Security Directory Suite VA is affected by CVE-2022-33159.
How does CVE-2022-33159 impact IBM Security Directory Suite VA?
CVE-2022-33159 allows an authenticated user to read user credentials in plain clear text in IBM Security Directory Suite VA.
Where can I find more information about CVE-2022-33159?
You can find more information about CVE-2022-33159 at the following links: [link1](https://exchange.xforce.ibmcloud.com/vulnerabilities/228567), [link2](https://www.ibm.com/support/pages/node/7001693).
- collector/nvd-index
- agent/references
- agent/type
- agent/first-publish-date
- agent/softwarecombine
- collector/ibm-support
- source/IBM
- agent/software-canonical-lookup
- agent/author
- agent/remedy
- agent/weakness
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/title
- agent/tags
- agent/event
- vendor/ibm
- canonical/ibm security directory suite va
- version/ibm security directory suite va/8.0.1
- version/ibm security directory suite va/8.0.1.19
- version/ibm security directory suite va/8.0.1-8.0.1.19