Security Verify Directory vulnerabilities
5 known vulnerabilities in Security Verify Directory from IBM. 5 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
Security Verify Directory: Session Fixation
IBM Security Verify Directory 10.0.0 through 10.0.4 and IBM Verify Directory 11.0.0 is vulnerable to session fixation. An attacker can establish a session and, after the victim authenticates, hijack the authenticated session to gain unauthorized access to the
- 7.2 High severity
Security Verify Directory (Container): Unrestricted Upload of File with Dangerous Type
IBM Security Verify Directory (Container) 10.0.0 through 10.0.0.3 IBM Security Verify Directory could be vulnerable to malicious file upload by not validating file type. A privileged user could upload malicious files into the system that can be sent to victims
- 7.8 High severity
Security Verify Directory: Execution with Unnecessary Privileges
IBM Security Verify Directory Container 10.0.0.0 through 10.0.3.1 could allow a local user to execute commands as root due to execution with unnecessary privileges.
- 8.8 High severity
Security Verify Directory: Improper Neutralization of Special Elements used in an OS Command
IBM Security Verify Directory 10.0.0 through 10.0.3 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request.
- 9.1 Critical severity
Security Directory Server: Improper Restriction of XML External Entity Reference
IBM Security Directory Server 6.4.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 228505.