CVE-2024-22330: IBM Security Verify Governance information disclosure
IBM Security Verify Governance 10.0.2 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts.
Other sources
IBM Security Verify Governance does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts.
— IBM
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-22330?
CVE-2024-22330 has been rated as a medium severity vulnerability due to the potential for unauthorized access to user accounts.
How do I fix CVE-2024-22330?
To address CVE-2024-22330, ensure that strong password policies are enabled and enforced for all user accounts in IBM Security Verify Governance 10.0.2.
What impact does CVE-2024-22330 have on user accounts?
CVE-2024-22330 allows attackers to more easily compromise user accounts due to the lack of strong password requirements by default.
Is CVE-2024-22330 present in versions after 10.0.2 of IBM Security Verify Governance?
CVE-2024-22330 specifically affects IBM Security Verify Governance up to version 10.0.2; later versions may have addressed the issue.
Who is affected by CVE-2024-22330?
Organizations using IBM Security Verify Governance 10.0.2 without strong password enforcement are at risk due to CVE-2024-22330.