Lucene search

K
IbmSecurity Identity Governance And Intelligence

7 matches found

CVE
CVE
added 2020/05/28 4:15 p.m.80 views

CVE-2020-4248

IBM Security Identity Governance and Intelligence 5.2.6 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 175484.

4CVSS3.3AI score0.00099EPSS
CVE
CVE
added 2019/02/21 5:29 p.m.52 views

CVE-2018-1949

IBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 153429.

4.3CVSS4.8AI score0.00119EPSS
CVE
CVE
added 2019/02/21 5:29 p.m.44 views

CVE-2018-1948

IBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes t...

4.3CVSS4.7AI score0.00147EPSS
CVE
CVE
added 2018/08/06 2:29 p.m.39 views

CVE-2017-1412

IBM Security Identity Governance Virtual Appliance 5.2 through 5.2.3.2 generates an error message that includes sensitive information about its environment, users, or associated data. IBM X-Force ID: 127400.

4.3CVSS4.9AI score0.00137EPSS
CVE
CVE
added 2021/01/21 2:15 p.m.38 views

CVE-2020-4966

IBM Security Identity Governance and Intelligence 5.2.6 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to th...

4.3CVSS4.1AI score0.00356EPSS
CVE
CVE
added 2019/02/21 5:29 p.m.34 views

CVE-2018-1950

IBM Security Identity Governance and Intelligence 5.2 through 5.2.4.1 Virtual Appliance generates an error message that includes sensitive information about its environment, users, or associated data which could be used in further attacks against the system. IBM X-Force ID: 153430.

4.3CVSS4.9AI score0.00119EPSS
CVE
CVE
added 2020/08/05 2:15 p.m.30 views

CVE-2020-4243

IBM Security Identity Governance and Intelligence 5.2.6 Virtual Appliance could allow a remote attacker to obtain sensitive information using man in the middle techniques due to not properly invalidating session tokens. IBM X-Force ID: 175420.

4.3CVSS3.7AI score0.00207EPSS