CVE-2022-22455

CVE-2022-22455 is a critical privilege escalation vulnerability affecting the IBM Security Verify Governance Identity Manager 10.0 virtual appliance. It allows an unauthenticated attacker to execute operations at a higher privilege level than intended, leading to complete compromise of confidentiality, integrity, and availability. With a CVSS score of 9.8, this vulnerability is easily exploitable over the network with low attack complexity. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion, indicating awareness among security researchers.