CVE-2023-35017 MEDIUM

CVE-2023-35017: IBM Security Verify Governance information

Vendor Ibm

Product Security Verify Governance

Weakness CWE-319 · Cleartext transmission

Published January 29, 2025

Last update January 29, 2025

View on NVD All CVEs

CVSS base score

5.9/10

Attack vector Network

Attack complexity High

Privileges required None

User interaction None

Confidentiality High

Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

IBM Security Verify Governance 10.0.2 Identity Manager can transmit user credentials in clear text that could be obtained by an attacker using man in the middle techniques.

Key dates

02Disclosure timeline

January 29, 2025 CVE published

January 29, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2023-35017 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/319.html

Related vulnerabilities

04Related CVE

CVE-2023-30602 Hitron Technologies Inc. CODA-5310 - Insecure service Telnet CVE-2026-6066 Unencrypted Client‑Server Communication in ConnectWise Automate™ Solution Center CVE-2025-2861 Cleartext Transmission of Sensitive Information vulnerability in saTECH BCU CVE-2025-66573 Solstice Pod API Session Key Extraction via API Endpoint CVE-2025-53756 Cleartext Transmission Vulnerability in Digisol DG-GR6821AC Router