| Package | Affected versions | Patched versions |
|---|---|---|
| security verify password synchronization | ≥ 6.0.0, < 10.0.4 | 10.0.4 |
IBM Security Identity Manager (IBM Security Verify Password Synchronization Plug-in for Windows AD 10.x) is vulnerable to a denial of service, caused by a heap-based buffer overflow in the Password Synch Plug-in. An authenticated attacker could exploit this vulnerability to cause a denial of service. IBM X-Force ID: 217369.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free