Sign-up

ID

VAR-202403-3007


CVE

CVE-2024-25027


TITLE

IBM  of  Security Verify Access  Vulnerability regarding lack of encryption of critical data in

Trust: 0.8

sources: JVNDB: JVNDB-2024-003065

DESCRIPTION

IBM Security Verify Access 10.0.6 could disclose sensitive snapshot information due to missing encryption. IBM X-Force ID: 281607

Trust: 1.62

sources: NVD: CVE-2024-25027 // JVNDB: JVNDB-2024-003065

AFFECTED PRODUCTS

vendor:ibmmodel:security verify accessscope:eqversion:10.0.6

Trust: 1.8

vendor:ibmmodel:security verify accessscope:eqversion: -

Trust: 0.8

sources: JVNDB: JVNDB-2024-003065 // NVD: CVE-2024-25027

CVSS

SEVERITY

CVSSV2

CVSSV3

NVD: CVE-2024-25027
value: MEDIUM

Trust: 1.8

psirt@us.ibm.com: CVE-2024-25027
value: MEDIUM

Trust: 1.0

NVD:
baseSeverity: MEDIUM
baseScore: 5.5
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 1.8
impactScore: 3.6
version: 3.1

Trust: 1.0

psirt@us.ibm.com:
baseSeverity: MEDIUM
baseScore: 6.2
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 2.5
impactScore: 3.6
version: 3.1

Trust: 1.0

NVD: CVE-2024-25027
baseSeverity: MEDIUM
baseScore: 5.5
vectorString: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: JVNDB: JVNDB-2024-003065 // NVD: CVE-2024-25027 // NVD: CVE-2024-25027

PROBLEMTYPE DATA

problemtype:CWE-311

Trust: 1.0

problemtype:Lack of encryption of critical data (CWE-311) [ others ]

Trust: 0.8

sources: JVNDB: JVNDB-2024-003065 // NVD: CVE-2024-25027

CONFIGURATIONS

sources:
            
            
            NVD: CVE-2024-25027

PATCH
title:7145400 IBM X-Force Exchangeurl:https://www.ibm.com/support/pages/node/7145400
Trust: 0.8
sources:
            
            
            JVNDB: JVNDB-2024-003065

EXTERNAL IDS
db:NVDid:CVE-2024-25027
Trust: 2.6
db:JVNDBid:JVNDB-2024-003065
Trust: 0.8
sources:
            
            
            JVNDB: JVNDB-2024-003065 // 
            
            
            
            NVD: CVE-2024-25027

REFERENCES
url:https://exchange.xforce.ibmcloud.com/vulnerabilities/281607
Trust: 1.0
url:https://www.ibm.com/support/pages/node/7145400
Trust: 1.0
url:https://nvd.nist.gov/vuln/detail/cve-2024-25027
Trust: 0.8
sources:
            
            
            JVNDB: JVNDB-2024-003065 // 
            
            
            
            NVD: CVE-2024-25027

SOURCES
db:JVNDBid:JVNDB-2024-003065
db:NVDid:CVE-2024-25027

LAST UPDATE DATE
2024-04-18T13:29:42.346000+00:00

SOURCES UPDATE DATE
db:JVNDBid:JVNDB-2024-003065date:2024-04-04T00:38:00
db:NVDid:CVE-2024-25027date:2024-04-02T17:57:34.440

SOURCES RELEASE DATE
db:JVNDBid:JVNDB-2024-003065date:2024-04-04T00:00:00
db:NVDid:CVE-2024-25027date:2024-03-31T12:15:50.637