IBM Security Directory Integrator Sensitive Information Disclosure Vulnerability

A vulnerability in IBM Security Directory Integrator versions 7.2.0.0 through 7.2.0.14 and 10.0.0.0 through 10.0.0.2 allows remote attackers to access sensitive information. This occurs when a detailed technical error message is displayed in the browser, potentially leading to further attacks on the system.

Impact

Exploitation of this vulnerability could result in unauthorized access to sensitive information, which could be used to launch additional attacks against the system.

Remediation

Users are advised to update to IBM Security Directory Integrator version 7.2.0.15 or 10.0.0.3. Instructions for downloading these versions are available on the IBM Support Fix Central website.