CVE-2022-33162

Name of the Vulnerable Software and Affected Versions IBM Security Directory Integrator versions 7.2.0 IBM Security Verify Directory Integrator version 10.0.0

Description The issue is related to the lack of authentication for certain functionality that requires a provable user identity or consumes significant resources, allowing operations at the privilege level of a standard unprivileged user. There is also a mention of a buffer overflow in memory, which could allow a remote attacker to bypass authentication procedures.

Recommendations For IBM Security Directory Integrator version 7.2.0, consider implementing additional authentication mechanisms for functionality that requires a provable user identity or consumes significant resources. For IBM Security Verify Directory Integrator version 10.0.0, consider implementing additional authentication mechanisms for functionality that requires a provable user identity or consumes significant resources. As a temporary workaround, consider restricting access to the affected functionality until a patch is available.