2.7
Low
CVE-2019-4705 IBM Security Identity Manager Virtual Appliance 7.0.2 discloses sensitive information to unauthorized users
Description
IBM Security Identity Manager Virtual Appliance 7.0.2 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 172015.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Security Identity Manager Virtual Appliance | 7.0.2 | No fix stated |
Other CVEs of Security Identity Manager Virtual Appliance
The 4 CVEs of Security Identity Manager Virtual Appliance →
CVE-2019-4706
IBM Security Identity Manager Virtual Appliance 7.0.2 writes information to log files which can be of a sensitive nature…
2.7
Low
CVE-2019-4676
IBM Security Identity Manager Virtual Appliance 7.0.2 stores user credentials in plain in clear text which can be read…
6.3
Medium
CVE-2019-4704
IBM Security Identity Manager Virtual Appliance 7.0.2 does not set the secure attribute on authorization tokens or…
3.7
Low