Information disclosure in IBM Security Identity Governance and Intelligence (IGI) - CVE-2017-1412
Published: August 6, 2018 / Updated: August 8, 2020
Vulnerability identifier: #VU36793
CSH Severity: Low
CVSS v4: 5.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2017-1412
CWE-ID: CWE-200
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote authenticated user to gain access to sensitive information.
IBM Security Identity Governance Virtual Appliance 5.2 through 5.2.3.2 generates an error message that includes sensitive information about its environment, users, or associated data. IBM X-Force ID: 127400.
Affected software
IBM Security Identity Governance and Intelligence (IGI)
How to mitigate CVE-2017-1412
Install update from vendor's website.