CVE-2022-33162: IBM Directory Server buffer overflow
IBM Security Directory Integrator 7.2.0 and Security Verify Directory Integrator 10.0.0 does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources, at the privilege level of a standard unprivileged user. IBM X-Force ID: 228570.
Other sources
IBM Security Directory Server does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-33162?
CVE-2022-33162 has been classified as a high severity vulnerability due to its potential for unauthorized access and resource consumption.
How do I fix CVE-2022-33162?
To fix CVE-2022-33162, upgrade IBM Security Directory Integrator to version 7.2.1 or later, or IBM Security Verify Directory Integrator to version 10.0.1 or later.
What systems are affected by CVE-2022-33162?
CVE-2022-33162 affects IBM Security Directory Integrator versions up to 7.2.0 and IBM Security Verify Directory Integrator up to version 10.0.0.
Is CVE-2022-33162 easy to exploit?
Yes, CVE-2022-33162 can be easily exploited by standard unprivileged users without the need for authentication.
What impact does CVE-2022-33162 have on security?
The impact of CVE-2022-33162 includes potential unauthorized access to system resources, which could lead to data breaches or service disruptions.