2.7
Low
CVE-2019-4706 IBM Security Identity Manager Virtual Appliance 7.0.2 writes information to log files which can be of a sensitive nature…
Description
IBM Security Identity Manager Virtual Appliance 7.0.2 writes information to log files which can be of a sensitive nature and give valuable guidance to an attacker or expose sensitive user information. IBM X-Force ID: 172016.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Security Identity Manager Virtual Appliance | 7.0.2 | No fix stated |
Other CVEs of Security Identity Manager Virtual Appliance
The 4 CVEs of Security Identity Manager Virtual Appliance →
CVE-2019-4705
IBM Security Identity Manager Virtual Appliance 7.0.2 discloses sensitive information to unauthorized users
2.7
Low
CVE-2019-4676
IBM Security Identity Manager Virtual Appliance 7.0.2 stores user credentials in plain in clear text which can be read…
6.3
Medium
CVE-2019-4704
IBM Security Identity Manager Virtual Appliance 7.0.2 does not set the secure attribute on authorization tokens or…
3.7
Low