PT-2022-15352
CVE-2022-22312
·
تاريخ النشر
2022-04-27
·
تاريخ التحديث
2022-05-05
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
IBM Security Identity Manager (IBM Security Verify Password Synchronization Plug-in for Windows AD) version 10.x
Description
The issue is a denial of service caused by a heap-based buffer overflow in the Password Synch Plug-in. An authenticated attacker could exploit this to cause a denial of service.
Recommendations
For version 10.x, update to a version that includes a fix for the heap-based buffer overflow in the Password Synch Plug-in. As a temporary workaround, consider restricting access to the Password Synch Plug-in to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾