CVE-2020-4232: Improper Restriction of Excessive Authentication Attempts

IBM Security Identity Governance and Intelligence 5.2.6 could allow an attacker to enumerate usernames to find valid login credentials which could be used to attempt further attacks against the system. IBM X-Force ID: 175336...

CVE-2020-4231: Improper Input Validation

IBM Security Identity Governance and Intelligence 5.2.6 could allow an authenticated user to perform unauthorized commands due to hazardous input validation. IBM X-Force ID: 175335...

CVE-2020-4248: Generation of Error Message Containing Sensitive Information

IBM Security Identity Governance and Intelligence 5.2.6 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 175484...

CVE-2020-4246: Improper Restriction of XML External Entity Reference

IBM Security Identity Governance and Intelligence 5.2.6 is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 175481...

CVE-2020-4245: Weak Password Requirements

IBM Security Identity Governance and Intelligence 5.2.6 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 175423...

PT-2020-17944

Name of the Vulnerable Software and Affected Versions IBM Security Identity Governance and Intelligence version 5.2.6 Description The issue allows a remote attacker to exploit an XML External Entity Injection XXE attack when processing XML data, potentially exposing sensitive information or...

PT-2020-17943

Name of the Vulnerable Software and Affected Versions IBM Security Identity Governance and Intelligence version 5.2.6 Description The issue is related to the default password settings, which do not require strong passwords, making it easier for attackers to compromise user accounts. Recommendatio...

PT-2020-17945

Name of the Vulnerable Software and Affected Versions IBM Security Identity Governance and Intelligence version 5.2.6 Description The issue allows a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used i...

CVE-2020-4249: Incorrect Authorization

IBM Security Identity Governance and Intelligence 5.2.6 could disclose highly sensitive information to other authenticated users on the sytem due to incorrect authorization. IBM X-Force ID: 175485...

PT-2020-17942

Name of the Vulnerable Software and Affected Versions IBM Security Identity Governance and Intelligence version 5.2.6 Description The issue allows an unauthorized user to obtain sensitive information through user enumeration. Recommendations For IBM Security Identity Governance and Intelligence...

IBM Security Identity Governance and Intelligence Information Disclosure Vulnerability (CNVD-2020-30830)

IBM Security Identity Governance and Intelligence IGI is a suite of identity governance solutions from IBM in the United States. The product includes features such as lifecycle management, access risk assessment and identity management. An information disclosure vulnerability exists in IBM Securi...

PT-2020-17932

Name of the Vulnerable Software and Affected Versions IBM Security Identity Governance and Intelligence version 5.2.6 Description The issue is caused by the failure to set the secure flag for the session cookie in SSL mode, allowing a remote attacker to obtain sensitive information. An attacker...

PT-2020-17946

Name of the Vulnerable Software and Affected Versions IBM Security Identity Governance and Intelligence version 5.2.6 Description The issue could disclose highly sensitive information to other authenticated users on the system due to incorrect authorization. Recommendations For IBM Security...

IBM Security Identity Governance and Intelligence Input Validation Error Vulnerability

IBM Security Identity Governance and Intelligence IGI is a suite of identity governance solutions from IBM in the United States. The product includes features such as lifecycle management, access risk assessment and identity management. An input validation error vulnerability exists in IBM Securi...

PT-2020-17931

Name of the Vulnerable Software and Affected Versions IBM Security Identity Governance and Intelligence version 5.2.6 Description The issue allows an attacker to enumerate usernames to find valid login credentials, which could be used to attempt further attacks against the system. Recommendations...

CVE-2020-4244: Undefined Security Weakness

IBM Security Identity Governance and Intelligence 5.2.6 could allow an unauthorized user to obtain sensitive information through user enumeration. IBM X-Force ID: 175422...

Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to a security vulnerability (CVE-2020-4233)

Summary IBM has announced a release for IBM Security Identity Governance and Intelligence IGI in response to a security vulnerability. An attacker could exploit a vulnerability in the Virtual Appliance to capture the cookie and obtain sensitive information. Vulnerability Details CVEID:...

Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to a security vulnerability (CVE-2020-4248)

Summary IBM has announced a release for IBM Security Identity Governance and Intelligence IGI in response to a security vulnerability. The Virtual Appliance could allow a remote attacker to obtain sensitive information. Vulnerability Details CVEID: CVE-2020-4248 DESCRIPTION: IBM Security Identity...

Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to security vulnerabilities (CVE-2018-1058, CVE-2018-10936, CVE-2019-9193)

Summary IBM has announced a release for IBM Security Identity Governance and Intelligence IGI in response to security vulnerabilities 3 issues for Postgresql: 1 for a flaw in the searchpath setting2, 1 for a failure to check the host name if a host name verifier was not provided to the driver and...

Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to security vulnerabilities (CVE-2019-11729, CVE-2019-11745)

Summary IBM has announced a release for IBM Security Identity Governance and Intelligence IGI in response to security vulnerabilities. Mozilla Firefox is vulnerable to a denial of service and Mozilla Network Security Services NSS, as used in Mozilla Firefox could allow a remote attacker to execut...