Vulnerability · Published Aug 16, 2024 · Assigned by ibm
CVE-2022-33162IBM Directory Server buffer overflow
High 7.3
In plain English
A high-severity memory corruption in Security Directory Integrator from IBM. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 37% of all known vulnerabilities).
Severity (CVSS 3.1)7.3High
Exploit odds (30 days)0.4%top 62.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
IBM Security Directory Integrator 7.2.0 and Security Verify Directory Integrator 10.0.0 does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources, at the privilege level of a standard unprivileged user. IBM X-Force ID: 228570.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| IBM | Security Directory Integrator | 7.2.0 |
| IBM | Security Verify Directory Integrator | 10.0.0 |
Weakness: CWE-119 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L