CVE-2023-35018

IBM Security Verify Governance 10.0 could allow a privileged use to upload arbitrary files due to improper file validation. IBM X-Force ID: 259382...

CVE-2023-35018

IBM Security Verify Governance (Identity Manager virtual appliance) is affected by CVE-2023-35018, where a privileged user could upload arbitrary files due to improper file validation. The issue affects version pre-10.0.2 FP0 in the Identity Manager virtual appliance component. IBM’s bulletin als...

Security Bulletin: IBM Security Verify Governance - Identity Manager (Virtual Appliance) is affected by multiple vulnerabilities (CVE-2023-35903, CVE-2023-35018, CVE-2023-35013, X-Force ID 220945)

Summary IBM Security Verify Governance - Identity Manager Virtual Appliance is vulnerable to arbitrary file upload, escalation of privileges, and sensitive information leak. These issues have been addressed in this update. Vulnerability Details CVEID:CVE-2023-35903 DESCRIPTION: IBM Security Verif...