Описание
IBM Security Identity Manager 6.0 and 7.0 could allow an attacker to create unexpected control flow paths through the application, potentially bypassing security checks. Exploitation of this weakness can result in a limited form of code injection. IBM X-Force ID: 156162.
Ссылки
- VDB EntryVendor Advisory
- PatchVendor Advisory
- VDB EntryVendor Advisory
- PatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 6.0.0.0 (включая) до 6.0.0.20 (включая)Версия от 7.0.0.0 (включая) до 7.0.1.10 (включая)
Одно из
cpe:2.3:a:ibm:security_identity_manager:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:security_identity_manager:*:*:*:*:*:*:*:*
EPSS
Процентиль: 26%
0.0009
Низкий
7.2 High
CVSS3
6.2 Medium
CVSS3
4.6 Medium
CVSS2
Дефекты
CWE-94
Связанные уязвимости
CVSS3: 6.2
github
больше 3 лет назад
IBM Security Identity Manager 6.0 and 7.0 could allow an attacker to create unexpected control flow paths through the application, potentially bypassing security checks. Exploitation of this weakness can result in a limited form of code injection. IBM X-Force ID: 156162.
EPSS
Процентиль: 26%
0.0009
Низкий
7.2 High
CVSS3
6.2 Medium
CVSS3
4.6 Medium
CVSS2
Дефекты
CWE-94