Skip to content
OpenAdvisories
Medium WID-SEC-2022-2377 4 CVEs

IBM Security Identity Manager: Mehrere Schwachstellen

Published Dec 20, 2022 · Updated Dec 20, 2022 · de-DE

Vendor: IBM Product: Security Identity Manager virtual appliance component 10.0.1 Platform: Linux

Summary

Ein Angreifer kann mehrere Schwachstellen in IBM Security Identity Manager ausnutzen, um Informationen offenzulegen und einen Cross-Site-Scripting Angriff durchzuführen.

Product

Der IBM Security Identity Manager ermöglicht ein automatisiertes Policy-basiertes Nutzermanagement.

Vulnerabilities 4

  • Medium 6.3
    CVE-2022-22458

    IBM Security Verify Governance, Identity Manager information disclosure

    IBM Security Verify Governance, Identity Manager 10.0.1 stores user credentials in plain clear text which can be read by a remote authenticated user. IBM X-Force ID: 225009.

    IBM Security Verify Governance Identity Manager
  • Medium 5.3
    CVE-2022-22449

    IBM Security Verify Governance, Identity Manager information disclosure

    IBM Security Verify Governance, Identity Manager 10.01 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM …

    IBM Security Verify Governance Identity Manager
  • Medium 5.3
    CVE-2022-22457

    IBM Security Verify Governance, Identity Manager information disclosure

    IBM Security Verify Governance, Identity Manager 10.0.1 stores sensitive information including user credentials in plain clear text which can be read by a local privileged user. IBM X-Force ID: 225007.

    IBM Security Verify Governance Identity Manager
  • Medium 4.2
    CVE-2022-22456

    IBM Security Verify Governance, Identity Manager cross-site scripting

    IBM Security Verify Governance, Identity Manager 10.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclos…

    IBM Security Verify Governance Identity Manager

Revision history

  1. #1

    Initiale Fassung

References