Security Bulletin: Multiple Security Vulnerabilities have been fixed in the IBM Directory Server and IBM Directory Suite products (CVE-2022-22473. CVE-2021-38951)

Summary Multiple Security Vulnerabilities in the IBM WebSphere Application Server product as shipped with the IBM Directory Server and IBM Directory Suite products have been fixed. Vulnerability Details CVEID:CVE-2022-22473 DESCRIPTION: IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 coul...

CVE-2022-33166

IBM Security Directory Suite VA 8.0.1 through 8.0.1.19 could allow a privileged user to upload malicious files of dangerous types that can be automatically processed within the product's environment. IBM X-Force ID: 228586...

CVE-2022-32757: Improper Restriction of Excessive Authentication Attempts

IBM Security Directory Suite VA 8.0.1 through 8.0.1.19 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 228510...

PT-2023-13236

Name of the Vulnerable Software and Affected Versions IBM Security Directory Suite VA version 8.0.1 Description The issue allows an attacker to cause a denial of service due to uncontrolled resource consumption. Recommendations For IBM Security Directory Suite VA version 8.0.1, at the moment, the...

CVE-2022-33168: Uncontrolled Resource Consumption

IBM Security Directory Suite VA 8.0.1 could allow an attacker to cause a denial of service due to uncontrolled resource consumption. IBM X-Force ID: 228588...

CVE-2022-33163: Incorrect Permission Assignment for Critical Resource

IBM Security Directory Suite VA 8.0.1 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. IBM X-Force ID: 228571...

PT-2023-13230 · Ibm · Ibm Security Directory Suite Va

Name of the Vulnerable Software and Affected Versions: IBM Security Directory Suite VA versions 8.0.1 through 8.0.1.19 Description: The issue allows an authenticated user to read user credentials stored in plain clear text. Recommendations: For IBM Security Directory Suite VA versions 8.0.1 throu...