authentication vulnerability in Security Directory Integrator

CVE-2022-33162

Summary

The vulnerability in IBM Security Directory Integrator and Security Verify Directory Integrator stems from a failure to authenticate certain operations that should require validated user identities. This oversight allows standard unprivileged users to carry out actions that can consume extensive resources, potentially disrupting normal operations. Proper authentication mechanisms should be enforced to mitigate risks associated with unauthorized activities.

References