Ibm · Ibm Infosphere Identity Insight · CVE-2019-4433
**Name of the Vulnerable Software and Affected Versions**
IBM InfoSphere Global Name Management versions 5.0 through 6.0
IBM InfoSphere Identity Insight versions 8.1 through 9.0
**Description**
The issue allows a remote attacker to exploit an XML External Entity Injection (XXE) attack when processing XML data, potentially exposing sensitive information or consuming memory resources.
**Recommendations**
For IBM InfoSphere Global Name Management versions 5.0 through 6.0, update to a version that includes a fix for the XML External Entity Injection (XXE) attack.
For IBM InfoSphere Identity Insight versions 8.1 through 9.0, update to a version that includes a fix for the XML External Entity Injection (XXE) attack.
As a temporary workaround, consider restricting the processing of XML data to minimize the risk of exploitation.