PT-2019-9838 · Ibm · Ibm Security Identity Governance/Intelligence

Published 2019-02-21 · Updated 2019-10-09 · CVE-2018-1950

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Security Identity Governance and Intelligence versions 5.2 through 5.2.4.1 Virtual Appliance

Description The issue generates an error message that includes sensitive information about its environment, users, or associated data, which could be used in further attacks against the system.

Recommendations For IBM Security Identity Governance and Intelligence versions 5.2 through 5.2.4.1 Virtual Appliance, consider implementing error message filtering to prevent the disclosure of sensitive information. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2018-1950

Affected Products

Ibm Security Identity Governance/Intelligence

References · 4

• https://exchange.xforce.ibmcloud.com/vulnerabilities/153430 · Vendor Advisory
• https://ibm.com/support/docview.wss?uid=ibm10872142 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-1950 · Security Note
• https://osv.dev/vulnerability/CVE-2018-1950 · Vendor Advisory