Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2022-22312

EPSS 0.57% · P69
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2022-22312

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
IBM Security Identity Manager (IBM Security Verify Password Synchronization Plug-in for Windows AD 10.x) is vulnerable to a denial of service, caused by a heap-based buffer overflow in the Password Synch Plug-in. An authenticated attacker could exploit this vulnerability to cause a denial of service. IBM X-Force ID: 217369.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
IBM Security Identity Manager 缓冲区错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
IBM Security Identity Manager（ISIM）是美国IBM公司的一套身份管理和治理解决方案。该方案可在整个用户生命周期内自动创建、修改、重新认证和终止用户特权，并支持基于策略的密码管理。 IBM Security Identity Manager 存在安全漏洞，该漏洞由于边界错误而存在漏洞。远程用户可以将特制数据传递给应用程序，触发基于堆的缓冲区溢出并执行拒绝服务 (DoS) 攻击。该漏洞允许远程用户执行拒绝服务 (DoS) 攻击。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
IBMSecurity Verify Password Synchronization Plug-in for Windows AD 10.0.0 -

II. Public POCs for CVE-2022-22312

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2022-22312

请登录查看更多情报信息。

Same Patch Batch · IBM · 2022-04-27 · 10 CVEs total

CVE-2022-22315IBM UrbanCode Deploy 安全漏洞
CVE-2022-22345IBM QRadar SIEM 跨站脚本漏洞
CVE-2022-22323IBM Security Identity Manager 缓冲区错误漏洞
CVE-2021-38939IBM QRadar SIEM 日志信息泄露漏洞
CVE-2021-38919IBM QRadar SIEM 信息泄露漏洞
CVE-2021-38878IBM QRadar SIEM 安全漏洞
CVE-2021-38874IBM QRadar SIEM 安全漏洞
CVE-2021-38869IBM QRadar SIEM 授权问题漏洞
CVE-2021-29776IBM QRadar SIEM 信息泄露漏洞

IV. Related Vulnerabilities

Same product: Security Verify Password Synchronization Plug-in for Windows AD
Same vendor: IBM

V. Comments for CVE-2022-22312

No comments yet

Leave a comment