CVE-2024-43187

CVSS v3 5.9 MEDIUM

5.9^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.2 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

I

BM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

References

Link	Resource
https://www.ibm.com/support/pages/node/7182386	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:ibm:security_verify_access::::::::
	cpe:2.3:a:ibm:security_verify_access_docker::::::::

History

15 Dec 2025, 20:04

Type	Values Removed	Values Added
CPE	cpe:2.3:a:ibm:verify_identity_access::::::::	cpe:2.3:a:ibm:security_verify_access_docker::::::::
First Time		Ibm security Verify Access Docker

05 Aug 2025, 14:07

Type	Values Removed	Values Added
References	~~() https://www.ibm.com/support/pages/node/7182386 -~~	() https://www.ibm.com/support/pages/node/7182386 - Vendor Advisory
Summary		(es) IBM Security Verify Access Appliance and Container 10.0.0 a 10.0.8 transmite datos confidenciales o críticos para la seguridad en texto plano en un canal de comunicación que puede ser detectado por actores no autorizados.
First Time		Ibm Ibm verify Identity Access Ibm security Verify Access
CPE		cpe:2.3:a:ibm:verify_identity_access:::::::: cpe:2.3:a:ibm:security_verify_access::::::::

04 Feb 2025, 21:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2025-02-04 21:15

Updated : 2025-12-15 20:04

NVD link : CVE-2024-43187

Mitre link : CVE-2024-43187

CVE.ORG link : CVE-2024-43187

JSON object : View

Products Affected

CWE

CWE-319

Cleartext Transmission of Sensitive Information

{"id": "CVE-2024-43187", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.9, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.2}, {"type": "Primary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2025-02-04T21:15:26.537", "references": [{"url": "https://www.ibm.com/support/pages/node/7182386", "tags": ["Vendor Advisory"], "source": "[email protected]"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-319"}]}], "descriptions": [{"lang": "en", "value": "IBM Security Verify Access Appliance and Container 10.0.0 through 10.0.8 transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors."}, {"lang": "es", "value": "IBM Security Verify Access Appliance and Container 10.0.0 a 10.0.8 transmite datos confidenciales o cr\u00edticos para la seguridad en texto plano en un canal de comunicaci\u00f3n que puede ser detectado por actores no autorizados."}], "lastModified": "2025-12-15T20:04:28.480", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:security_verify_access:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CCA4ADF8-014B-4A43-AE12-CC7D46B0F8BF", "versionEndExcluding": "10.0.9.0", "versionStartIncluding": "10.0.0.0"}, {"criteria": "cpe:2.3:a:ibm:security_verify_access_docker:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FFF4D7D4-0D01-44CA-84A2-2EA59802D1CB", "versionEndExcluding": "10.0.9.0", "versionStartIncluding": "10.0.0.0"}], "operator": "OR"}]}], "sourceIdentifier": "[email protected]"}