Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to a security vulnerability (CVE-2019-12406)

IBM has announced a release for IBM Security Identity Governance and Intelligence (IGI) in response to a security vulnerability. A remote attacker could exploit a vulnerability in Apache CXF causing a denial of service.

Affected product(s) and affected version(s):

Affected Product(s)	Version(s)
IBM Security Identity Governance and Intelligence	5.2
IBM Security Identity Governance and Intelligence	5.2.3
IBM Security Identity Governance and Intelligence	5.2.4
IBM Security Identity Governance and Intelligence	5.2.5
IBM Security Identity Governance and Intelligence	5.2.6

 

Refer to the following reference URLs for remediation and additional vulnerability details:  
Source Bulletin: https://www.ibm.com/support/pages/node/6208321

The post Security Bulletin: IBM has announced a release for IBM Security Identity Governance and Intelligence in response to a security vulnerability (CVE-2019-12406) appeared first on IBM PSIRT Blog.

from IBM Product Security Incident Response Team https://ift.tt/2X65RJ0