9 results (0.003 seconds)

CVSS: 8.8EPSS: 0%CPEs: 2EXPL: 0

CVE-2021-20574

https://notcve.org/view.php?id=CVE-2021-20574

28 Jun 2021 — IBM Security Identity Manager Adapters 6.0 and 7.0 could allow a remote authenticated attacker to conduct an LDAP injection. By using a specially crafted request, an attacker could exploit this vulnerability and takeover other accounts. IBM X-Force ID: 199252. IBM Security Identity Manager Adapters versiones 6.0 y 7.0, podrían permitir a un atacante remoto autenticado conducir una inyección LDAP. Al usar una petición especialmente diseñada, un atacante podría explotar esta vulnerabilidad y tomar el contro d... • https://exchange.xforce.ibmcloud.com/vulnerabilities/199252 • CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') •

CVSS: 6.5EPSS: 0%CPEs: 3EXPL: 0

CVE-2021-20573

https://notcve.org/view.php?id=CVE-2021-20573

28 Jun 2021 — IBM Security Identity Manager Adapters 6.0 and 7.0 are vulnerable to a heap-based buffer overflow, caused by improper bounds checking. A remote authenticated attacker could overflow the and cause the server to crash. IBM X-Force ID: 199249. IBM Security Identity Manager Adapters versiones 6.0 y 7.0, son vulnerables a un desbordamiento de búfer en la región heap de la memoria, causado por una comprobación inapropiada de límites. Un atacante autenticado remoto podría desbordar el búfer y causar el bloqueo del... • https://exchange.xforce.ibmcloud.com/vulnerabilities/199249 • CWE-787: Out-of-bounds Write •

CVSS: 6.5EPSS: 0%CPEs: 3EXPL: 0

CVE-2021-20572

https://notcve.org/view.php?id=CVE-2021-20572

28 Jun 2021 — IBM Security Identity Manager Adapters 6.0 and 7.0 are vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A remote authenticated attacker could overflow the and cause the server to crash. IBM X-Force ID: 199247. IBM Security Identity Manager Adapters versiones 6.0 y 7.0, son vulnerables a un desbordamiento de búfer en la región stack de la memoria, causado por una comprobación inapropiada de límites. Un atacante autenticado remoto podría desbordar el búfer y causar el bloqueo d... • https://exchange.xforce.ibmcloud.com/vulnerabilities/199247 • CWE-787: Out-of-bounds Write •

CVSS: 6.5EPSS: 0%CPEs: 2EXPL: 0

CVE-2021-20494

https://notcve.org/view.php?id=CVE-2021-20494

28 Jun 2021 — IBM Security Identity Manager Adapters 6.0 and 7.0 are vulnerable to a heap based buffer overflow, caused by improper bounds. An authenticared user could overflow the buffer and cause the service to crash. IBM X-Force ID: 197882. IBM Security Identity Manager Adapters versiones 6.0 y 7.0, son vulnerables a un desbordamiento de búfer en la región heap de la memoria, causado por una comprobación inapropiada de límites. Un usuario autenticado podría desbordar el búfer y causar el bloqueo del servicio. • https://exchange.xforce.ibmcloud.com/vulnerabilities/197882 • CWE-787: Out-of-bounds Write •

CVSS: 7.3EPSS: 0%CPEs: 6EXPL: 0

CVE-2016-0330

https://notcve.org/view.php?id=CVE-2016-0330

15 Jul 2016 — IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 mishandles password creation, which makes it easier for remote attackers to obtain access by leveraging an attack against the password algorithm. IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 hasta la versión 7.0.1.1 en versiones anteriores a 7.0.1-ISS-SIM-FP0003 maneja incorrectamente la creación de contraseñas, lo que facilita a atacantes remotos obtener acceso aprovechando un ataque... • http://www-01.ibm.com/support/docview.wss?uid=swg21985736 • CWE-255: Credentials Management Errors •

CVSS: 6.2EPSS: 0%CPEs: 6EXPL: 0

CVE-2016-0338

https://notcve.org/view.php?id=CVE-2016-0338

15 Jul 2016 — IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 allows local users to discover cleartext passwords by (1) reading a configuration file or (2) examining a process. IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 hasta la versión 7.0.1.1 en versiones anteriores a 7.0.1-ISS-SIM-FP0003 permite a usuarios locales descubrir contraseñas en texto plano (1) leyendo un archivo de configuración o (2) examinando un proceso. • http://www-01.ibm.com/support/docview.wss?uid=swg21985736 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 5.6EPSS: 0%CPEs: 6EXPL: 0

CVE-2016-0339

https://notcve.org/view.php?id=CVE-2016-0339

15 Jul 2016 — IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 mishandles session identifiers after logout, which makes it easier for remote attackers to spoof users by leveraging knowledge of "traffic records." IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 hasta la versión 7.0.1.1 en versiones anteriores a 7.0.1-ISS-SIM-FP0003 maneja incorrectamente identificadores de sesión después del cierre de sesión, lo que facilita a atacantes remotos suplan... • http://www-01.ibm.com/support/docview.wss?uid=swg21985736 • CWE-284: Improper Access Control •

CVSS: 7.4EPSS: 0%CPEs: 6EXPL: 0

CVE-2016-0340

https://notcve.org/view.php?id=CVE-2016-0340

15 Jul 2016 — IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 mishandles session expiration, which allows remote attackers to hijack sessions by leveraging an unattended workstation. IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 hasta la versión 7.0.1.1 en versiones anteriores a 7.0.1-ISS-SIM-FP0003 maneja incorrectamente el vencimiento de sesión, lo que permite a atacantes remotos secuestrar sesiones aprovechando una estación de trabajo desatend... • http://www-01.ibm.com/support/docview.wss?uid=swg21985736 • CWE-284: Improper Access Control •

CVSS: 4.3EPSS: 0%CPEs: 6EXPL: 0

CVE-2016-0357

https://notcve.org/view.php?id=CVE-2016-0357

15 Jul 2016 — IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 allows remote attackers to conduct clickjacking attacks via a crafted web site. IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 hasta la versión 7.0.1.1 en versiones anteriores a 7.0.1-ISS-SIM-FP0003 permite a atacantes remotos llevar a cabo ataques de clickjacking a través de un sitio web manipulado. • http://www-01.ibm.com/support/docview.wss?uid=swg21985736 • CWE-284: Improper Access Control •