IBM Security Identity Governance and Intelligence Information Disclosure Vulnerability (CNVD-2019-05515)

IBM Security Identity Governance and Intelligence IGI is a suite of identity governance solutions from IBM in the United States. The product includes features such as lifecycle management, access risk assessment and identity management. A security vulnerability exists in IBM Security IGI that ste...

CVE-2017-1367: Exposure of Sensitive Information to an Unauthorized Actor

IBM Security Identity Governance and Intelligence Virtual Appliance 5.2 through 5.2.3.2 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 1268...

CVE-2017-1395: Exposure of Sensitive Information to an Unauthorized Actor

IBM Security Identity Governance and Intelligence Virtual Appliance 5.2 through 5.2.3.2 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive...

PT-2018-5589

Name of the Vulnerable Software and Affected Versions: IBM Security Identity Governance and Intelligence Virtual Appliance versions 5.2 through 5.2.3.2 Description: The issue concerns the storage of sensitive information in URL parameters, which could lead to information disclosure if unauthorize...

PT-2018-5606

Name of the Vulnerable Software and Affected Versions: IBM Security Identity Governance and Intelligence Virtual Appliance versions 5.2 through 5.2.3.2 Description: The issue is caused by the failure to properly enable HTTP Strict Transport Security, allowing a remote attacker to obtain sensitive...