High · 7.2 CVE-2023-35019 EUVD-2023-39056GHSA-8cjm-v723-gj32

IBM Security Verify Governance command execution

Published Jul 31, 2023 · Updated Oct 18, 2024 · Assigned by ibm

Vendor: IBM Product: Security Verify Governance Identity Manager

Description

IBM Security Verify Governance, Identity Manager 10.0 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 257873.

Affected products

Vendor	Product	Affected	Fixed
IBM	Security Verify Governance, Identity Manager	10.0	—

Advisories 1

WID-SEC-2023-1914 IBM Security Identity Manager: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 30, 2023

References

https://www.ibm.com/support/pages/node/7014397 vendor-advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/257873 vdb-entry