Back to CVE Browser

CVE-2019-4675

CRITICAL

9.8

CVSS Severity Score

EPSS Score0.0480%

EPSS Percentile0.93th

PublishedFeb 4, 2020

Last ModifiedNov 21, 2024

Vulnerability Description

IBM Security Identity Manager 7.0.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 171511.

Affected Platforms (CPE)

📦

Ibm

Security Identity Manager

= 7.0.1

References & Advisories

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/171511

🔗 https://www.ibm.com/support/pages/node/1288714

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/171511

🔗 https://www.ibm.com/support/pages/node/1288714

Related Vulnerabilities

CVE-2020-202110.0

When Security Assertion Markup Language (SAML) authentication is enabled and the 'Validate Identity Provider Certificate' option i...

CVE-2016-03329.8

IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.0 before 7.0.1-ISS-SIM-FP0001 do not properly restric...

CVE-2016-59649.8

IBM Security Privileged Identity Manager Virtual Appliance version 2.0.2 uses an inadequate account lockout setting that could all...

CVE-2018-04489.8

A vulnerability in the identity management service of Cisco Digital Network Architecture (DNA) Center could allow an unauthenticat...