PT-2019-9807 · Ibm · Ibm Security Identity Governance/Intelligence

Published 2019-02-21 · Updated 2019-10-09 · CVE-2018-1944

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM Security Identity Governance and Intelligence versions 5.2 through 5.2.4.1 Virtual Appliance

Description The issue concerns hard-coded credentials, such as a password or cryptographic key, used for inbound authentication, outbound communication to external components, or encryption of internal data.

Recommendations For IBM Security Identity Governance and Intelligence versions 5.2 through 5.2.4.1 Virtual Appliance, update to a version that does not contain hard-coded credentials to resolve the issue.

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2018-1944

Affected Products

Ibm Security Identity Governance/Intelligence

References · 4

• https://exchange.xforce.ibmcloud.com/vulnerabilities/153386 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-1944 · Vendor Advisory
• https://ibm.com/support/docview.wss?uid=ibm10872142 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-1944 · Security Note