IBM Security Identity Manager Adapters 6.0 and 7.0 does not perform an authentication check for a critical resource or functionality allowing anonymous users access to protected areas. IBM X-Force ID: 128621.
The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.
Link | Tags |
---|---|
http://www.securityfocus.com/bid/101013 | third party advisory vdb entry |
http://www.ibm.com/support/docview.wss?uid=swg22007375 | patch vendor advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/128621 | vdb entry vendor advisory |