Security Verify Governance vulnerabilities
9 known vulnerabilities in Security Verify Governance from IBM. 9 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
Security Verify Governance: Weak Password Requirements
IBM Security Verify Governance 10.0.2 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts.
- 8.8 High severity
Security Verify Governance: Improper Neutralization of Special Elements used in an OS Command
IBM Security Verify Governance 10.0 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 256036.
- 9.8 Critical severity
Security Verify Governance: Use of Hard-coded Credentials
IBM Security Verify Governance 10.0 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 22522
- 9.8 Critical severity
Security Verify Governance: Use of Hard-coded Credentials
IBM Security Verify Governance 10.0 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 25601
- 8.8 High severity
Security Verify Governance, Identity Manager: Improper Neutralization of Special Elements used in an OS Command
IBM Security Verify Governance, Identity Manager 10.0 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 257873.
- 7.5 High severity
Security Verify Governance: Use of a Broken or Risky Cryptographic Algorithm
IBM Security Verify Governance, Identity Manager virtual appliance component 10.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 225078.
- 7.5 High severity
Security Verify Governance, Identity Manager: Use of a Broken or Risky Cryptographic Algorithm
IBM Security Verify Governance, Identity Manager 10.0.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 225007.
- 7.5 High severity
Security Verify Governance: Inadequate Encryption Strength
IBM Security Verify Identity Manager 10.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 224919.
- 7.5 High severity
Security Verify Governance: Improper Restriction of Excessive Authentication Attempts
IBM Security Verify Identity Manager 10.0 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials. IBM X-Force ID: 224918.