CVE-2022-22312

Name of the Vulnerable Software and Affected Versions IBM Security Identity Manager (IBM Security Verify Password Synchronization Plug-in for Windows AD) version 10.x

Description The issue is a denial of service caused by a heap-based buffer overflow in the Password Synch Plug-in. An authenticated attacker could exploit this to cause a denial of service.

Recommendations For version 10.x, update to a version that includes a fix for the heap-based buffer overflow in the Password Synch Plug-in. As a temporary workaround, consider restricting access to the Password Synch Plug-in to minimize the risk of exploitation.