IBM Security Verify Governance, Identity Manager 10.0 vulnerabilities

IBM Security Verify Governance Identity Manager 10.0.2 may return detailed technical error messages that disclose sensitive system information. A remote attacker could use this information in further attacks against the system.

IBM Security Verify Governance, Identity Manager 10.0 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request.

IBM Security Verify Governance, Identity Manager 10.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing 'dot dot' sequences (/../) to view arbitrary files on the system.