PT-2022-7093 · Ibm · Identity Manager+1

Ben Goodspeed + 8 · Published 2022-12-22 · Updated 2022-12-29 · CVE-2022-22461

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Security Verify Governance, Identity Manager version 10.0.1

Description The issue is related to the use of weak cryptographic algorithms in the Identity Manager component of IBM Security Verify Governance software, which is used for managing and controlling access to corporate resources and applications. This could allow a remote attacker to gain access to confidential information by decrypting highly sensitive data.

Recommendations For Identity Manager version 10.0.1, consider updating to a version that uses stronger cryptographic algorithms to mitigate the risk of exploitation. As a temporary workaround, restrict access to sensitive information and resources to minimize the potential impact of this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use of a Broken Cryptographic Algorithm

Weakness Enumeration

CWE-327

Related Identifiers

BDU:2023-07568

CVE-2022-22461

Affected Products

Ibm Security Verify Governance

Identity Manager

References · 5

• https://ibm.com/support/pages/node/6850845 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-22461 · Security Note
• https://bdu.fstec.ru/vul/2023-07568 · Security Note
• https://osv.dev/vulnerability/CVE-2022-22461 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/225077 · Vendor Advisory