CVE-2022-22466: IBM Security Verify Governance information disclosure
IBM Security Verify Governance 10.0 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 225222.
Other sources
IBM Security Verify Governance contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-22466?
The severity of CVE-2022-22466 is medium with a CVSS score of 6.8.
What is the vulnerability of CVE-2022-22466?
CVE-2022-22466 is an information disclosure vulnerability in IBM Security Verify Governance 10.0
How can an attacker exploit CVE-2022-22466?
An attacker can exploit CVE-2022-22466 by leveraging the hard-coded credentials in IBM Security Verify Governance 10.0
What is the affected software of CVE-2022-22466?
The affected software of CVE-2022-22466 is IBM Security Verify Governance 10.0
How can I mitigate CVE-2022-22466?
To mitigate CVE-2022-22466, update to a version of IBM Security Verify Governance that does not contain the hard-coded credentials.