CVE-2024-28767

IBM Security Directory Integrator 7.2.0 through 7.2.0.13 and 10.0.0 through 10.0.3 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request...

The vulnerability of the IBM Security Directory Integrator, a software tool for synchronizing identity data, and the IBM Security Verify Directory Integrator, an integration tool, arises due to the possibility of an operation occurring outside of the buffer in memory. This vulnerability allows attackers to bypass the authentication process.

The vulnerability of the IBM Security Directory Integrator and IBM Security Verify Directory Integrator software lies in the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a malicious actor to bypass authentication procedures...

PT-2024-5256 · Ibm · Ibm Security Directory Integrator +1

Name of the Vulnerable Software and Affected Versions: IBM Security Directory Integrator version 7.2.0 IBM Security Verify Directory Integrator version 10.0.0 Description: The issue is related to stored cross-site scripting in the web interface of the affected software, allowing users to embed...