CVE-2023-35017

MEDIUM

IBM Security Verify Governance - Cleartext Transmission

Title source: rule

Description

IBM Security Verify Governance 10.0.2 Identity Manager can transmit user credentials in clear text that could be obtained by an attacker using man in the middle techniques.

References (1)

[Vendor Advisory] https://www.ibm.com/support/pages/node/7172423

Scores

CVSS v3 5.9

EPSS 0.0003

EPSS Percentile 7.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-319

Status published

Products (1)

ibm/security_verify_governance 10.0.2

Published Jan 29, 2025

Tracked Since Feb 18, 2026