IBM Security Directory Server 6.4.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. X-Force ID: 228569.
References
| Link | Resource |
|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilities/228569 | VDB Entry Vendor Advisory |
| https://www.ibm.com/support/pages/node/7047116 | Patch Vendor Advisory |
| https://www.ibm.com/support/pages/node/7047428 | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
18 Oct 2023, 20:32
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.9 |
| First Time |
Ibm security Directory Integrator
Ibm security Directory Suite Ibm security Verify Directory Ibm Ibm security Directory Server |
|
| CWE | CWE-311 | |
| CPE | cpe:2.3:a:ibm:security_directory_integrator:7.2.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:security_verify_directory:10.0.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:security_directory_server:6.4.0.0:*:*:*:*:*:*:* cpe:2.3:a:ibm:security_directory_suite:8.0.1:*:*:*:*:*:*:* |
|
| References | (MISC) https://exchange.xforce.ibmcloud.com/vulnerabilities/228569 - VDB Entry, Vendor Advisory | |
| References | (MISC) https://www.ibm.com/support/pages/node/7047116 - Patch, Vendor Advisory | |
| References | (MISC) https://www.ibm.com/support/pages/node/7047428 - Patch, Vendor Advisory |
14 Oct 2023, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-10-14 15:15
Updated : 2023-12-10 15:14
NVD link : CVE-2022-33161
Mitre link : CVE-2022-33161
CVE.ORG link : CVE-2022-33161
JSON object : View
Products Affected
ibm
- security_verify_directory
- security_directory_integrator
- security_directory_suite
- security_directory_server
CWE
CWE-311
Missing Encryption of Sensitive Data