CVE-2024-25027

Summary

IBM Security Verify Access 10.0.6 could disclose sensitive snapshot information due to missing encryption. IBM X-Force ID: 281607.

Affected Software

Weaknesses

• CWE-311: CWE-311 Missing Encryption of Sensitive Data

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

CVE Program Container

Additional References

• https://www.ibm.com/support/pages/node/7145400
• https://exchange.xforce.ibmcloud.com/vulnerabilities/281607
• http://seclists.org/fulldisclosure/2024/Nov/0

References

• https://www.ibm.com/support/pages/node/7145400
• https://exchange.xforce.ibmcloud.com/vulnerabilities/281607

• ←Previous
• Next→