PT-2022-15444 · Ibm · Ibm Security Verify Governance Identity Manager

Ben Goodspeed + 8 · Published 2022-08-17 · Updated 2022-08-19 · CVE-2022-22455

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM Security Verify Governance Identity Manager version 10.0

Description The issue arises because a component of the IBM Security Verify Governance Identity Manager performs an operation at a higher privilege level than necessary, potentially creating new weaknesses or amplifying existing ones.

Recommendations For IBM Security Verify Governance Identity Manager version 10.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2022-22455

Affected Products

Ibm Security Verify Governance Identity Manager

References · 5

• https://osv.dev/vulnerability/CVE-2022-22455 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-22455 · Security Note
• https://ibm.com/support/pages/node/6612733 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/224989 · Vendor Advisory
• https://t.me/cibsecurity/48291 · Telegram Post