Vulnerability Details CVE-2022-22312
IBM Security Identity Manager (IBM Security Verify Password Synchronization Plug-in for Windows AD 10.x) is vulnerable to a denial of service, caused by a heap-based buffer overflow in the Password Synch Plug-in. An authenticated attacker could exploit this vulnerability to cause a denial of service. IBM X-Force ID: 217369.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 67.6%
CVSS Severity
CVSS v3 Score 5.7
CVSS v2 Score 4.0
References
Products affected by CVE-2022-22312
-
cpe:2.3:a:ibm:security_verify_password_synchronization:*
-
cpe:2.3:a:microsoft:active_directory:-