Security Bulletin: Vulnerabilities in Open Source libxml2 affect IBM Security Identity Governance Appliance (CVE-2015-1819 )

Summary

Vulnerabilities in Open Source libxml2 that is used by IBM Security Identity Governance

Vulnerability Details

CVEID: CVE-2015-1819**
DESCRIPTION:** Libxml is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error in the xmlreader when processing XML data. A remote attacker could exploit this vulnerability to consume all available memory resources.
CVSS Base Score: 5.3
CVSS Temporal Score: See https://exchange.xforce.ibmcloud.com/vulnerabilities/107272 for the current score
CVSS Environmental Score*: Undefined
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)

Affected Products and Versions

IBM Security Identity Governance and Intelligence 5.2

Remediation/Fixes

IBM Security Identity Governance and Intelligence

| 5.2| None| 5.2.0.1-ISS-SIGI-IF0002
—|—|—|—

_For _IBM Security Identity Governance 5.1.0 , IBM Security Identity Governance 5.1.1, IBM recommends upgrading to a fixed, supported version/release/platform of the product.