416 multiple vulnerabilities found in ibmsecurity

IBM-Security / ibmsecurity

Idempotent functions for IBM Security Appliance REST APIs. Currently covering ISAM and ISDS Appliances.

Apache License 2.0

47 stars 73 forks source link

Closed tombosmansibm closed 5 months ago

tombosmansibm commented 5 months ago

security fix: enable verify ssl (V-94) (#416)
security fix: show a warning about not verifying tls for connections to the LMI (V-93) (#416)
security fix: remove hardcoded usernames and passwords (V-95) (#416)
security fix: uninitialized variables (V-96) (#416)
documentation: update readme with info on how to handle the tls verification

pba-report-isva commented 5 months ago

Hello,

can you provide the CVEs and publish the corresponding advisories in https://github.com/IBM-Security/ibmsecurity/security?

Thank you.