CVE-2022-32759: 
IBM Security Verify Access (formerly ISAM) vulnerability analysis and mitigation

CVE-2022-32759 affects IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0. The vulnerability was disclosed on July 25, 2024, and involves insufficient session expiration which could allow unauthorized users to obtain sensitive information (NVD, IBM Security Bulletin).

The vulnerability has been assigned a CVSS v3.1 base score of 5.3 (MEDIUM) by IBM Corporation and 7.5 (HIGH) by NVD. The CVSS vector is CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N, indicating that it is network-accessible, requires low attack complexity, needs no privileges or user interaction, and primarily impacts confidentiality (NVD, X-Force).

This vulnerability could allow an unauthorized user to obtain sensitive information due to insufficient session expiration in the IBM Security Directory Server (IBM Security Bulletin).

According to the CVSS temporal metrics, the exploit status is marked as 'Unproven That Exploit Exists' with a temporal score of 4.6 (X-Force).

IBM strongly recommends updating to the latest versions of the software. For IBM Security Directory Integrator 7.2.0, users should update to version 7.2.0-ISS-SDI-FP0012, and for IBM Security Verify Directory Integrator 10.0.0, users should update to version ibm-svdi-10.0.0.1. Container images for version 10.0.0 can be found in the product documentation (IBM Security Bulletin).