CVE-2017-1489

IBM Security Access Manager 6.1, 7.0, 8.0, and 9.0 e-community configurations may be affected by a redirect vulnerability. ECSSO Master Authentication can redirect to a server not participating in an e-community domain. IBM X-Force ID: 128687.

Score

CVSS 3.0 6.1 Medium

Status

Modified - psirt@us.ibm.com

Published

2017-08-29

Last modified

2024-09-16

Weaknesses

CWE-601

Affected products

• Security Access Manager (Ibm)
• Security Access Manager For Mobile (Ibm)
• Security Access Manager For Web (Ibm)
• Security Access Manager For Web Appliance (Ibm)
• Security Access Manager For Web Software (Ibm)
• Tivoli Access Manager For E-business (Ibm)

References

• http://www.ibm.com/support/docview.wss?uid=swg22006959
• http://www.securityfocus.com/bid/100592
• http://www.securitytracker.com/id/1039227
• https://exchange.xforce.ibmcloud.com/vulnerabilities/128687