Lucene search
K

10 matches found

BDU FSTEC
BDU FSTEC
added 2025/05/27 12:0 a.m.3 views

The vulnerability of the IBM Security Directory Integrator, a software tool for synchronizing identity data, and the IBM Security Verify Directory Integrator, an integration tool, lies in their ability to disclose protected information by reading directory files.

The vulnerability of the IBM Security Directory Integrator and IBM Security Verify Directory Integrator software lies in their ability to disclose information by reading directory files. Exploiting this vulnerability allows a malicious actor to disclose protected information...

2.7CVSS5.4AI score0.00291EPSS
Exploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/02/03 12:0 a.m.3 views

The vulnerability of the IBM Security Directory Integrator and the IBM Security Verify Directory Integrator data integration tools lies in the absence of a “Secure” flag in the session cookies. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the IBM Security Directory Integrator and the IBM Security Verify Directory Integrator data integration tools is related to the absence of the “Secure” flag in the session cookies. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain...

4.9CVSS5.5AI score0.00168EPSS
Exploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
added 2025/02/03 12:0 a.m.4 views

The vulnerability of the IBM Security Directory Integrator and the IBM Security Verify Directory Integrator data integration tools lies in the absence of a “Secure” flag in the session cookies. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the IBM Security Directory Integrator and the IBM Security Verify Directory Integrator data integration tools is related to the absence of the “Secure” flag in the session cookies. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain...

4.9CVSS5.5AI score0.00168EPSS
Exploits0References3Affected Software2
CNNVD
CNNVD
added 2025/01/27 12:0 a.m.2 views

IBM Security Directory Integrator和IBM Security Verify Directory Integrator 安全漏洞

IBM Security Directory Integrator and IBM Security Verify Directory Integrator are both products of International Business Machines IBM.IBM Security Directory Integrator is an integrated development environment and runtime service. IBM Security Verify Directory Integrator is software for...

7.5CVSS6.1AI score0.00291EPSS
Exploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2024/11/22 4:10 p.m.16 views

Security Bulletin: Security vulnerabilities fixed in IBM Security Directory Suite (CVE-2022-33167, CVE-2022-32754, CVE-2022-33162)

Summary Security vulnerabilities found in IBM Security Directory Integrator as shipped with IBM Security Directory Suite were fixed. Vulnerability Details CVEID:CVE-2022-33167 DESCRIPTION: IBM Security Directory Integrator 7.2.0 and IBM Security Verify Directory Integrator 10.0.0 could allow a...

9.8CVSS6.7AI score0.0043EPSS
Exploits0Affected Software1
Positive Technologies
Positive Technologies
added 2024/07/25 12:0 a.m.3 views

PT-2024-11579 · Ibm · Ibm Security Directory Integrator +1

Name of the Vulnerable Software and Affected Versions: IBM Security Directory Integrator version 7.2.0 IBM Security Verify Directory Integrator version 10.0.0 Description: The issue is related to insufficient session expiration, which could allow an unauthorized user to obtain sensitive...

7.5CVSS7.4AI score0.00378EPSS
Exploits0References7
IBM Security Bulletins
IBM Security Bulletins
added 2024/07/24 3:50 p.m.24 views

Security Bulletin: Security Vulnerability fixed in IBM Security Directory Integrator (CVE-2022-32759)

Summary The IBM Security Directory Integrator product uses insufficient session expiration which affects the IBM Security Directory Server. The issue has been addressed in an update. Vulnerability Details CVEID:CVE-2022-32759 DESCRIPTION: IBM Security Directory Server uses insufficient session...

7.5CVSS5.9AI score0.00378EPSS
Exploits0Affected Software1
Positive Technologies
Positive Technologies
added 2024/07/24 12:0 a.m.3 views

PT-2024-5256 · Ibm · Ibm Security Directory Integrator +1

Name of the Vulnerable Software and Affected Versions: IBM Security Directory Integrator version 7.2.0 IBM Security Verify Directory Integrator version 10.0.0 Description: The issue is related to stored cross-site scripting in the web interface of the affected software, allowing users to embed...

7.1CVSS6.7AI score0.00267EPSS
Exploits0References9
Positive Technologies
Positive Technologies
added 2024/07/24 12:0 a.m.3 views

PT-2024-5991 · Ibm · Ibm Security Directory Integrator +1

Name of the Vulnerable Software and Affected Versions: IBM Security Directory Integrator versions 7.2.0 IBM Security Verify Directory Integrator version 10.0.0 Description: The issue is related to the lack of authentication for certain functionality that requires a provable user identity or...

9.8CVSS8AI score0.0043EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2024/03/10 12:0 a.m.3 views

PT-2024-10411 · Ibm · Ibm Security Directory Integrator +1

Name of the Vulnerable Software and Affected Versions: IBM Security Directory Integrator version 7.2.0 IBM Security Verify Directory Integrator version 10.0.0 Description: The issue is related to the absence of the secure attribute in session cookies, allowing attackers to obtain cookie values by...

6.5CVSS5.9AI score0.00168EPSS
Exploits0References8
Rows per page
Query Builder