CVE-2023-33833 LOW

CVE-2023-33833: IBM Security Verify Information Queue information disclosure

Vendor Ibm

Product Security Verify Information Queue

Weakness CWE-311 · Missing encryption

Published August 31, 2023

Last update September 27, 2024

View on NVD All CVEs

CVSS base score

2.9/10

Attack vector Local

Attack complexity High

Privileges required None

User interaction None

Confidentiality Low

Integrity None

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

IBM Security Verify Information Queue 10.0.4 and 10.0.5 stores sensitive information in plain clear text which can be read by a local user. IBM X-Force ID: 256013.

Key dates

02Disclosure timeline

August 31, 2023 CVE published

September 27, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2023-33833 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/311.html

Related vulnerabilities

CVE-2023-33833: IBM Security Verify Information Queue information disclosure

01Description

02Disclosure timeline

03References

04Related CVE