CVE-2017-1474

IBM Security Access Manager Appliance 7.0.0, 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 128606.

Score

CVSS 3.0 5.3 Medium

Status

Modified - psirt@us.ibm.com

Published

2018-06-06

Last modified

2024-09-17

Weaknesses

CWE-200

Affected products

• Security Access Manager (Ibm)
• Security Access Manager For Mobile (Ibm)
• Security Access Manager For Web (Ibm)

References

• http://www.ibm.com/support/docview.wss?uid=swg22012329
• http://www.securityfocus.com/bid/104476
• https://exchange.xforce.ibmcloud.com/vulnerabilities/128606