Skip to content
OpenAdvisories
Medium WID-SEC-2023-1914 2 CVEs

IBM Security Identity Manager: Mehrere Schwachstellen

Published Jul 30, 2023 · Updated Jul 30, 2023 · de-DE

Vendor: IBM Product: Security Identity Manager 10.0.1

Summary

Ein entfernter authentifizierter Angreifer kann mehrere Schwachstellen in IBM Security Identity Manager ausnutzen, um Informationen preiszugeben oder beliebigen Code auszuführen.

Product

Der IBM Security Identity Manager ermöglicht ein automatisiertes Policy-basiertes Nutzermanagement.

Vulnerabilities 2

  • High 7.2
    CVE-2023-35019

    IBM Security Verify Governance command execution

    IBM Security Verify Governance, Identity Manager 10.0 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 257873.

    IBM Security Verify Governance Identity Manager
  • Medium 6.5
    CVE-2023-35016

    IBM Security Verify Governance path traversal

    IBM Security Verify Governance, Identity Manager 10.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM …

    IBM Security Verify Governance Identity Manager

Revision history

  1. #1

    Initiale Fassung

References