Security Directory Suite VA vulnerabilities
6 known vulnerabilities in Security Directory Suite VA from IBM. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
Security Directory Suite: Use of a Broken or Risky Cryptographic Algorithm
IBM Security Directory Suite 8.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 228568.
- 7.2 High severity
Security Directory Suite VA: Unrestricted Upload of File with Dangerous Type
IBM Security Directory Suite VA 8.0.1 through 8.0.1.19 could allow a privileged user to upload malicious files of dangerous types that can be automatically processed within the product's environment. IBM X-Force ID: 228586.
- 7.5 High severity
Security Directory Suite VA: Improper Restriction of Excessive Authentication Attempts
IBM Security Directory Suite VA 8.0.1 through 8.0.1.19 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 228510.
- 8.8 High severity
Security Directory Suite VA: Improper Neutralization of Special Elements used in an OS Command
IBM Security Directory Suite VA 8.0.1 through 8.0.1.19 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 228439.
- 7.5 High severity
Security Directory Suite VA: Uncontrolled Resource Consumption
IBM Security Directory Suite VA 8.0.1 could allow an attacker to cause a denial of service due to uncontrolled resource consumption. IBM X-Force ID: 228588.
- 8.1 High severity
Security Directory Suite VA: Incorrect Permission Assignment for Critical Resource
IBM Security Directory Suite VA 8.0.1 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. IBM X-Force ID: 228571.