Описание
IBM Security Identity Manager 6.0.0 could allow a remote attacker to execute arbitrary code on the system, caused by the deserialization of untrusted data. By persuading a victim to visit a specially crafted Web site, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 166456.
Ссылки
- VDB EntryVendor Advisory
- Vendor Advisory
- VDB EntryVendor Advisory
- Vendor Advisory
Уязвимые конфигурации
EPSS
8 High
CVSS3
8.8 High
CVSS3
9.3 Critical
CVSS2
Дефекты
Связанные уязвимости
IBM Security Identity Manager 6.0.0 could allow a remote attacker to execute arbitrary code on the system, caused by the deserialization of untrusted data. By persuading a victim to visit a specially crafted Web site, an attacker could exploit this vulnerability to execute arbitrary code on the system. IBM X-Force ID: 166456.
Уязвимость программного обеспечения IBM Security Identity Manager, связанная с недостатками механизма десериализации, позволяющая нарушителю выполнить произвольный код
EPSS
8 High
CVSS3
8.8 High
CVSS3
9.3 Critical
CVSS2