IBM Security Bulletin: IBM Security Access Manager for Enterprise Single-Sign On is affected by an XML External Entity Injection (XXE) vulnerability (CVE-2019-4513)
IBM Security Access Manager for Enterprise Single-Sign On has addressed the following vulnerability: XML External Entity Injection (XXE) attack when processing XML data.
CVE(s): CVE-2019-4513
Affected product(s) and affected version(s):
IBM Security Access Manager for Enterprise Single-Sign On 8.2.2
Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://www.ibm.com/support/docview.wss?uid=ibm10996716
X-Force Database: https://exchange.xforce.ibmcloud.com/vulnerabilities/164555
The post IBM Security Bulletin: IBM Security Access Manager for Enterprise Single-Sign On is affected by an XML External Entity Injection (XXE) vulnerability (CVE-2019-4513) appeared first on IBM PSIRT Blog.
from IBM Product Security Incident Response Team https://ift.tt/33PCpYZ