CVE-2020-4249

CVE-2020-4249 affects IBM Security Identity Governance and Intelligence (IGI) Virtual Appliance 5.2.6. The issue is an authorization flaw that could disclose highly sensitive information to other authenticated users. Impact is explicit: confidentiality compromise (PARTIAL to HIGH) per CVSS metric...

CVE-2020-4249

IBM Security Identity Governance and Intelligence 5.2.6 could disclose highly sensitive information to other authenticated users on the sytem due to incorrect authorization. IBM X-Force ID: 175485...

CVE-2020-4244

CVE-2020-4244 affects IBM Security Identity Governance and Intelligence 5.2.6. The IBM bulletin states the Virtual Appliance could allow an unauthorized user to obtain sensitive information through user enumeration, leading to information disclosure (CVE-2020-4244). Affected product/version: IBM ...

CVE-2020-4245

IBM Security Identity Governance and Intelligence 5.2.6 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 175423...

CVE-2020-4245

CVE-2020-4245 affects IBM Security Identity Governance and Intelligence (IGI) 5.2.6, where a weak default password policy (no requirement for strong passwords) enables easier compromise of user accounts. This is tied to the IGI Virtual Appliance as described in IBM’s bulletin and X-Force referenc...

CVE-2020-4233

IBM Security Identity Governance and Intelligence version 5.2.6 is affected by CVE-2020-4233 due to the application not setting the Secure flag on session cookies when using SSL. This allows a remote attacker to capture cookies during HTTP sessions and obtain sensitive information. The issue is d...

CVE-2020-4232

IBM Security Identity Governance and Intelligence 5.2.6 could allow an attacker to enumerate usernames to find valid login credentials which could be used to attempt further attacks against the system. IBM X-Force ID: 175336...

CVE-2020-4232

CVE-2020-4232 affects IBM Security Identity Governance and Intelligence (IGI) Virtual Appliance, version 5.2.6. The vulnerability allows an attacker to enumerate usernames to obtain valid login credentials, potentially enabling further attacks. Root cause details are not explicitly described beyo...

CVE-2020-4233

IBM Security Identity Governance and Intelligence 5.2.6 could allow a remote attacker to obtain sensitive information, caused by the failure to set the secure flag for the session cookie in SSL mode. By intercepting its transmission within an HTTP session, an attacker could exploit this...

CVE-2020-4231

CVE-2020-4231 affects IBM Security Identity Governance and Intelligence (IGI) Virtual Appliance, version 5.2.6. The vulnerability stems from hazardous input validation, enabling an authenticated user to execute unauthorized commands. The issue is documented with CVSS details indicating network ac...

CVE-2020-4231

IBM Security Identity Governance and Intelligence 5.2.6 could allow an authenticated user to perform unauthorized commands due to hazardous input validation. IBM X-Force ID: 175335...

IBM Security Identity Governance and Intelligence Information Disclosure Vulnerability (CNVD-2020-30831)

IBM Security Identity Governance and Intelligence IGI is a suite of identity governance solutions from IBM in the United States. The product includes features such as lifecycle management, access risk assessment and identity management. An information disclosure vulnerability exists in IBM Securi...

IBM Security Identity Governance and Intelligence Information Disclosure Vulnerability (CNVD-2020-31092)

IBM Security Identity Governance and Intelligence IGI is a suite of identity governance solutions from IBM in the United States. The product includes features such as lifecycle management, access risk assessment and identity management. A security vulnerability exists in IBM Security IGI version...

IBM Security Identity Governance and Intelligence XML External Entity Injection Vulnerability

IBM Security Identity Governance and Intelligence IGI is a suite of identity governance solutions from IBM in the United States. The product includes features such as lifecycle management, access risk assessment and identity management. A security vulnerability exists in IBM Security IGI version...

IBM Security Identity Governance and Intelligence Information Disclosure Vulnerability (CNVD-2020-31574)

IBM Security Identity Governance and Intelligence IGI is a suite of identity governance solutions from IBM in the United States. The product includes features such as lifecycle management, access risk assessment and identity management. A security vulnerability exists in IBM Security IGI version...

Unspecified Vulnerability in IBM Security Identity Governance and Intelligence (CNVD-2020-31571)

IBM Security Identity Governance and Intelligence IGI is a suite of identity governance solutions from IBM in the United States. The product includes features such as lifecycle management, access risk assessment and identity management. A security vulnerability exists in IBM Security IGI version...

IBM Security Identity Governance and Intelligence Input Validation Error Vulnerability

IBM Security Identity Governance and Intelligence IGI is a suite of identity governance solutions from IBM in the United States. The product includes features such as lifecycle management, access risk assessment and identity management. An input validation error vulnerability exists in IBM Securi...

Unspecified Vulnerability in IBM Security Identity Governance and Intelligence (CNVD-2020-31573)

IBM Security Identity Governance and Intelligence IGI is a suite of identity governance solutions from IBM in the United States. The product includes features such as lifecycle management, access risk assessment and identity management. A security vulnerability exists in IBM Security IGI version...

IBM Security Identity Governance and Intelligence Information Disclosure Vulnerability (CNVD-2020-30830)

IBM Security Identity Governance and Intelligence IGI is a suite of identity governance solutions from IBM in the United States. The product includes features such as lifecycle management, access risk assessment and identity management. An information disclosure vulnerability exists in IBM Securi...

Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to a security vulnerability (CVE-2020-4233)

Summary IBM has announced a release for IBM Security Identity Governance and Intelligence IGI in response to a security vulnerability. An attacker could exploit a vulnerability in the Virtual Appliance to capture the cookie and obtain sensitive information. Vulnerability Details CVEID:...