Product:

Security_identity_governance_and_intelligence

(Ibm)
Repositories

Unknown:

This might be proprietary software.
#Vulnerabilities 39
Date Id Summary Products Score Patch Annotated
2022-05-17 CVE-2020-4957 IBM Security Identity Governance and Intelligence 5.2.6 could disclose sensitive information in URL parameters that could aid in future attacks against the system. IBM X-Force ID: 192208. Security_identity_governance_and_intelligence 5.3
2020-05-28 CVE-2020-4232 IBM Security Identity Governance and Intelligence 5.2.6 could allow an attacker to enumerate usernames to find valid login credentials which could be used to attempt further attacks against the system. IBM X-Force ID: 175336. Security_identity_governance_and_intelligence 7.5
2020-05-28 CVE-2020-4233 IBM Security Identity Governance and Intelligence 5.2.6 could allow a remote attacker to obtain sensitive information, caused by the failure to set the secure flag for the session cookie in SSL mode. By intercepting its transmission within an HTTP session, an attacker could exploit this vulnerability to capture the cookie and obtain sensitive information. IBM X-Force ID: 175360. Security_identity_governance_and_intelligence 5.3
2020-05-28 CVE-2020-4244 IBM Security Identity Governance and Intelligence 5.2.6 could allow an unauthorized user to obtain sensitive information through user enumeration. IBM X-Force ID: 175422. Security_identity_governance_and_intelligence 5.3
2020-05-28 CVE-2020-4249 IBM Security Identity Governance and Intelligence 5.2.6 could disclose highly sensitive information to other authenticated users on the sytem due to incorrect authorization. IBM X-Force ID: 175485. Security_identity_governance_and_intelligence 6.5
2020-05-28 CVE-2020-4248 IBM Security Identity Governance and Intelligence 5.2.6 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 175484. Security_identity_governance_and_intelligence 2.7
2021-02-09 CVE-2020-4791 IBM Security Identity Governance and Intelligence 5.2.6 could allow an attacker to obtain sensitive information using main in the middle attacks due to improper certificate validation. IBM X-Force ID: 189379. Security_identity_governance_and_intelligence 5.3
2021-02-09 CVE-2020-4795 IBM Security Identity Governance and Intelligence 5.2.6 could disclose sensitive information to an unauthorized user using a specially crafted HTTP request. IBM X-Force ID: 189446. Security_identity_governance_and_intelligence 8.2
2021-02-09 CVE-2020-4996 IBM Security Identity Governance and Intelligence 5.2.6 could allow a local user to obtain sensitive information via the capturing of screenshots of authentication credentials. IBM X-Force ID: 192913. Security_identity_governance_and_intelligence 5.5
2021-02-09 CVE-2020-4995 IBM Security Identity Governance and Intelligence 5.2.6 does not invalidate session after logout which could allow a user to obtain sensitive information from another users' session. IBM X-Force ID: 192912. Security_identity_governance_and_intelligence 5.3