IBM Security Verify Governance 10.0, Identity Manager could allow a local privileged user to obtain sensitive information from source code. IBM X-Force ID: 257769.
Source code on a web server or repository often contains sensitive information and should generally not be accessible to users.
The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.
Link | Tags |
---|---|
https://www.ibm.com/support/pages/node/7050358 | patch vendor advisory |
https://exchange.xforce.ibmcloud.com/vulnerabilities/257769 | vdb entry vendor advisory |