Known vulnerabilities in directory software, identity management