Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
IBM Security Directory Integrator command execution
Vulnerability Description
IBM Security Directory Integrator 7.2.0 through 7.2.0.13 and 10.0.0 through 10.0.3 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request.
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
OS命令中使用的特殊元素转义处理不恰当(OS命令注入)
Vulnerability Title
IBM Security Directory Integrator 操作系统命令注入漏洞
Vulnerability Description
IBM Security Directory Integrator是美国国际商业机器（IBM）公司的一个集成开发环境和运行时服务。 IBM Security Directory Integrator 7.2.0版本至7.2.0.13版本和10.0.0版本至10.0.3版本存在操作系统命令注入漏洞，该漏洞源于可能允许远程经过身份验证的攻击者通过发送特制的请求在系统上执行任意命令。
CVSS Information
N/A
Vulnerability Type
N/A