Medium · 5.3 CVE-2022-22449 EUVD-2022-27595GHSA-8r9h-cvvp-3jq4

IBM Security Verify Governance, Identity Manager information disclosure

Published Dec 22, 2022 · Updated Apr 15, 2025 · Assigned by ibm

Vendor: IBM Product: Security Verify Governance Identity Manager

Description

IBM Security Verify Governance, Identity Manager 10.01 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 224915.

Affected products

Vendor	Product	Affected	Fixed
IBM	Security Verify Governance, Identity Manager	10.0.1	—

Advisories 1

WID-SEC-2022-2377 IBM Security Identity Manager: Mehrere Schwachstellen BSI CERT-Bund (WID) · Dec 20, 2022

References

https://www.ibm.com/support/pages/node/6849247 vendor-advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/224915 vdb-entry