IBM Security Bulletin: IBM Security Identity Manager is affected by a limited code injection vulnerability (CVE-2019-4038)

Jan 31, 2019 9:01 am EST

Categorized: High Severity

Share this post:

IBM Security Identity Manager (ISIM) has addressed the following vulnerability that can allow attackers to compromise user accounts via limited code injection.

CVE(s): CVE-2019-4038

Affected product(s) and affected version(s):

Product	Version
IBM Security Identity Manager	6.0.0 – 6.0.0.20
IBM Security Identity Manager VA	7.0.0 – 7.0.1.10

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: https://www-01.ibm.com/support/docview.wss?uid=ibm10869604
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/156162

from IBM Product Security Incident Response Team https://ibm.co/2sWzo7Q