CVE-2017-1396: IBM Security Identity Governance And Intelligence

High severity, CVSS 8.1. EPSS: 0.8% chance of exploitation in the next 30 days.

IBM Security Identity Governance Virtual Appliance 5.2 through 5.2.3.2 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. IBM X-Force ID: 127342.

Affected products

• IBM Security Identity Governance And Intelligence: version 5.2 only; version 5.2.1 only; version 5.2.2 only; version 5.2.2.1 only; version 5.2.3 only; version 5.2.3.1 only; …

Published 2018-08-06. Last modified 2026-06-17.