CVE-2023-32330: IBM Security Verify Access man in the middle
IBM Security Verify Access 10.0.0.0 through 10.0.6.1 uses insecure calls that could allow an attacker on the network to take control of the server. IBM X-Force ID: 254977.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2023-32330?
CVE-2023-32330 is considered a critical security vulnerability due to the potential for remote server control by an attacker.
How do I fix CVE-2023-32330?
To fix CVE-2023-32330, upgrade IBM Security Verify Access to a version above 10.0.6.1 as outlined in IBM's security recommendations.
Who is affected by CVE-2023-32330?
CVE-2023-32330 affects all installations of IBM Security Verify Access versions 10.0.0.0 through 10.0.6.1, including Docker and Appliance versions.
What could an attacker do exploiting CVE-2023-32330?
An attacker exploiting CVE-2023-32330 could take control of the server, leading to unauthorized access and manipulation of data.
When was CVE-2023-32330 disclosed?
CVE-2023-32330 was disclosed recently as part of IBM's ongoing security updates and notifications to users.