PT-2019-9807 · Ibm · Ibm Security Identity Governance/Intelligence

Publicado 2019-02-21 · Atualizado 2019-10-09 · CVE-2018-1944

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM Security Identity Governance and Intelligence versions 5.2 through 5.2.4.1 Virtual Appliance

Description The issue concerns hard-coded credentials, such as a password or cryptographic key, used for inbound authentication, outbound communication to external components, or encryption of internal data.

Recommendations For IBM Security Identity Governance and Intelligence versions 5.2 through 5.2.4.1 Virtual Appliance, update to a version that does not contain hard-coded credentials to resolve the issue.

Correção

Using Hardcoded Credentials

Enumeração de Fraquezas

CWE-798

Identificadores relacionados

CVE-2018-1944

Produtos afetados

Ibm Security Identity Governance/Intelligence

Referências · 4

• https://exchange.xforce.ibmcloud.com/vulnerabilities/153386 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-1944 · Aviso do Fabricante
• https://ibm.com/support/docview.wss?uid=ibm10872142 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-1944 · Nota de Segurança