high8.8
CVE-2017-1407
IBM Security Identity Manager Virtual Appliance 6.0 and 7.0 could allow a remote authenticated attacker to execute arbitrary commands on the system.
Impact
IBM Security Identity Manager Virtual Appliance 6.0 and 7.0 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 127394.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Security Identity Governance And Intelligence | Versions 5.2.0, 5.2.1 |
| Ibm | Security Identity Manager | Versions 6.0.0.0, 7.0.0.0 |
| Ibm | Security Privileged Identity Manager | Versions 2.0.0, 2.0.1, 2.0.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.ibm.com/support/docview.wss?uid=swg22007377
- http://www.securityfocus.com/bid/101015
- https://exchange.xforce.ibmcloud.com/vulnerabilities/127394
- http://www.ibm.com/support/docview.wss?uid=swg22007377
- http://www.securityfocus.com/bid/101015
- https://exchange.xforce.ibmcloud.com/vulnerabilities/127394