CVE-2023-33833
LowCVSS 2.9Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
IBM Security Verify Information Queue versions 10.0.4 and 10.0.5 stores sensitive information in plain clear text, which can be read by a local user.
Risk Assessment
Storing sensitive data in plain text increases the risk of unauthorized access and exploitation by third parties.
Recommendation
It is recommended to upgrade to the latest version of the software and implement encryption mechanisms for stored data.
Other vulnerabilities in IBM Security Verify Information Queue
See all- CVE-2023-33835Medium
IBM Security Verify Information Queue versions 10.0.4 and 10.0.5 could allow a remote attacker to obtain sensitive information that could aid in further attacks against the system.
- CVE-2023-33834Medium
IBM Security Verify Information Queue versions 10.0.4 and 10.0.5 could allow a remote attacker to obtain sensitive information that could aid in further attacks against the system.
Original NVD description (English source)
IBM Security Verify Information Queue 10.0.4 and 10.0.5 stores sensitive information in plain clear text which can be read by a local user. IBM X-Force ID: 256013.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS