Skip to content
OpenAdvisories
Medium · 6.8 CVE-2024-28767 EUVD-2024-25853GHSA-2m82-q8pv-p7fx

IBM Security Directory Integrator command execution

Published Dec 20, 2024 · Updated Dec 20, 2024 · Assigned by ibm

Description

IBM Security Directory Integrator 7.2.0 through 7.2.0.13 and 10.0.0 through 10.0.3 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request.

Affected products

VendorProductAffectedFixed
IBM Security Directory Integrator 7.2.0 – ≤ 7.2.0.13, 10.0.0 – ≤ 10.0.3 —

References