| Package | Affected versions | Patched versions |
|---|---|---|
| security identity governance and intelligence | = 5.2.0= 5.2.1 | |
| security identity manager | = 6.0.0.0= 7.0.0.0 | |
| security privileged identity manager | = 2.0.0= 2.0.1= 2.0.2 |
IBM Security Identity Manager Virtual Appliance 6.0 and 7.0 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 127394.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free