CVE-2023-35017

MEDIUM 5.9CVE-2023-35017 · Published 29/01/2025 · updated 17/06/2026

In short

CVE-2023-35017 is a MEDIUM (CVSS 5.9) vulnerability affecting security verify governance (ibm).
Chance of exploitation in the next 30 days (EPSS): 0.24%, higher than 14.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
security verify governance ibm	`= 10.0.2`	No fix yet

Description

IBM Security Verify Governance 10.0.2 Identity Manager can transmit user credentials in clear text that could be obtained by an attacker using man in the middle techniques.

References

ibm.com/support/pages/node/7172423 · Vendor Advisory

More vulnerabilities in security verify governance

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

security verify governance

ibm

= 10.0.2

No fix yet

More vulnerabilities in security verify governance

See all →