Vulnerabilities > CVE-2023-33838

047910
CVSS 4.4 - MEDIUM
Attack vector
NETWORK
Attack complexity
HIGH
Privileges required
HIGH
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
network
high complexity
CWE-759
NVD
Published: 2025-01-29
Updated: 2025-01-29

Summary

IBM Security Verify Governance 10.0.2 Identity Manager uses a one-way cryptographic hash against an input that should not be reversible, such as a password, but the product does not also use a salt as part of the input.

Common Weakness Enumeration (CWE)

References