Code injection

IBM Security Verify Identity Manager 10.0 contains sensitive information in the source code repository that could be used in further attacks against the system. IBM X-Force ID: 225013...

Code injection

IBM Security Verify Identity Manager 10.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 224919...

CVE-2022-22460

CVE-2022-22460 affects IBM Security Verify Identity Manager 10.0, where sensitive information in the source code repository could be leveraged in subsequent attacks. The IBM bulletin notes remediation for the virtual appliance component, with a fix available in 10.0.1.1 (FP0001 path). Current con...

CVE-2022-22460

IBM Security Verify Identity Manager 10.0 contains sensitive information in the source code repository that could be used in further attacks against the system. IBM X-Force ID: 225013...

CVE-2022-22453

IBM Security Verify Identity Manager 10.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 224919...

CVE-2022-22453

CVE-2022-22453 affects IBM Security Verify Identity Manager 10.0 (virtual appliance component). The root cause is the use of weaker-than-expected cryptographic algorithms, allowing an attacker to decrypt highly sensitive information (confidentiality impact). IBM’s bulletin references a CVSS base ...

CVE-2022-22452

IBM Security Verify Identity Manager 10.0 is affected by CVE-2022-22452, due to an inadequate account lockout setting that could allow a remote attacker to brute-force credentials. Affected product/version: IBM Security Verify Identity Manager (virtual appliance component) version 10.0. The NVD e...

CVE-2022-22452

IBM Security Verify Identity Manager 10.0 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 224918...

CVE-2022-22450

IBM Security Verify Identity Manager 10.0 could allow a privileged user to upload a malicious file by bypassing extension security in an HTTP request. IBM X-Force ID: 224916...

CVE-2022-22450

IBM Security Verify Identity Manager 10.0 is vulnerable to a privilege‑level file upload by bypassing extension security in an HTTP request. Root cause: bypass of extension checking. Impact per sources is low (CVE-2022-22450; CVSS ~3.8, LOW). Affected product/version: IBM Security Verify Identity...

Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled in IBM Cloud Pak for Applications, is vulnerable to Identity Spoofing (CVE-2022-22476)

Summary IBM WebSphere Application Server Liberty, which is bundled in IBM Cloud Pak for Applications, is vulnerable to Identity Spoofing CVE-2022-22476 Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected Products an...

Security Bulletin: IBM WebSphere Application Server Liberty, which is bundled in IBM WebSphere Hybrid Edition, is vulnerable to Identity Spoofing (CVE-2022-22476)

Summary IBM WebSphere Application Server Liberty, which is bundled in IBM WebSphere Hybrid Edition, is vulnerable to Identity Spoofing CVE-2022-22476 Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section Affected Products and Versions Affected Products and...

CVE-2022-2393

A flaw was found in pki-core, which could allow a user to get a certificate for another user identity when directory-based authentication is enabled. This flaw allows an authenticated attacker on the adjacent network to impersonate another user within the scope of the domain, but they would not b...

CVE-2022-2393

A flaw was found in pki-core, which could allow a user to get a certificate for another user identity when directory-based authentication is enabled. This flaw allows an authenticated attacker on the adjacent network to impersonate another user within the scope of the domain, but they would not b...

Security Bulletin: Multiple Vulnerabilities in Apache Commons Compress affect WebSphere Application Server

Summary Security Vulnerabilities in WebSphere Liberty affect IBM Voice Gateway. Vulnerability Details CVEID:CVE-2022-22475 DESCRIPTION: IBM WebSphere Application Server Liberty and Open Liberty 17.0.0.3 through 22.0.0.5 are vulnerable to identity spoofing by an authenticated user. IBM X-Force ID:...

CVE-2022-2393

Removed by vendor...

CVE-2022-2393

A flaw was found in pki-core, which could allow a user to get a certificate for another user identity when directory-based authentication is enabled. This flaw allows an authenticated attacker on the adjacent network to impersonate another user within the scope of the domain, but they would not b...

IBM Security Verify Identity Manager 加密问题漏洞

IBM Security Verify Identity Manager is a security verification identity manager from IBM USA. A security vulnerability exists in IBM Security Verify Identity Manager version 10.0 that stems from the use of a weaker-than-expected encryption algorithm. An attacker could exploit the vulnerability t...

Grafana 授权问题漏洞

Grafana is a set of open source monitoring tools from Grafana Labs that provide a visual monitoring interface. The tool is primarily used to monitor and analyze Graphite, InfluxDB, and Prometheus, among others. Grafana suffers from an authorization issue vulnerability that stems from the fact tha...

IBM Security Verify Identity Manager 代码问题漏洞

IBM Security Verify Identity Manager is a security verification identity manager from IBM, USA. A security vulnerability exists in IBM Security Verify Identity Manager version 10.0. An attacker could exploit the vulnerability to upload malicious files by bypassing extended security in HTTP reques...