CVE-2022-33161

Published: Oct 14, 2023Modified: Jun 17, 2026

5.9

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.2 / Impact: 3.6

Source: NVD

Description

IBM Security Directory Server 6.4.0 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. X-Force ID: 228569.

Affected (4)

Products: Ibm: Security Directory Integrator, Security Directory Server, Security Directory Suite, Security Verify Directory

Ibm

4 products

Security Directory Integrator

Security Directory Server

Security Directory Suite

Security Verify Directory

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Ibm Security Directory Integrator	Version 7.2.0
Ibm Security Directory Server	Version 6.4.0.0
Ibm Security Directory Suite	Version 8.0.1
Ibm Security Verify Directory	Version 10.0.0