CVE-2023-35013 LOW

CVE-2023-35013: IBM Security Verify Governance information disclosure

Vendor Ibm

Product Security Verify Governance

Weakness CWE-540

Published October 15, 2023

Last update September 16, 2024

View on NVD All CVEs

CVSS base score

2.3/10

Attack vector Local

Attack complexity Low

Privileges required High

User interaction None

Confidentiality Low

Integrity None

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

IBM Security Verify Governance 10.0, Identity Manager could allow a local privileged user to obtain sensitive information from source code. IBM X-Force ID: 257769.

Key dates

02Disclosure timeline

October 15, 2023 CVE published

September 16, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2023-35013 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/540.html

Related vulnerabilities

04Related CVE

CVE-2025-0923 IBM Cognos Analytics information disclosure CVE-2021-1516 Cisco Content Security Management Appliance, Email Security Appliance, and Web Security Appliance Information Disclosure Vulnerability CVE-2025-3403 Vivotek NVR ND8422P/NVR ND9525P/NVR ND9541P HTML Form sensitive information in source CVE-2021-28805 Inclusion of Sensitive Information in QSS CVE-2024-55907 IBM Cognos Mobile information disclosure