ГлавнаяУязвимости → CVE-2022-33162
7.3высокая

CVE-2022-33162

Описание

IBM Security Directory Integrator 7.2.0 and Security Verify Directory Integrator 10.0.0 does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources, at the privilege level of a standard unprivileged user. IBM X-Force ID: 228570.

Затрагиваемое ПО
Ibm Security directory integratorIbm Security verify directory integrator
CVSS
Балл7.3 — высокая
ВекторCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Источники
https://exchange.xforce.ibmcloud.com/vulnerabilities/228570https://www.ibm.com/support/pages/node/7161442