CVE-2018-2019

Name of the Vulnerable Software and Affected Versions: IBM Security Identity Manager version 6.0.0 Virtual Appliance

Description: The issue allows a remote attacker to exploit the vulnerability to expose sensitive information or consume memory resources through a XML External Entity Injection (XXE) attack when processing XML data.

Recommendations: For IBM Security Identity Manager version 6.0.0 Virtual Appliance, consider disabling XML data processing until a patch is available to prevent XXE attacks. Restrict access to sensitive information and monitor memory resources to minimize the risk of exploitation.