IBM Security Identity Governance and Intelligence 5.2.3.2 and 5.2.4 could allow an attacker to obtain sensitive information due to missing authentication in IGI for the survey application. IBM X-Force ID: 148601.
The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.
Link | Tags |
---|---|
http://www.ibm.com/support/docview.wss?uid=ibm10728883 | vendor advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/148601 | vdb entry patch vendor advisory |