medium6.1
CVE-2017-1489
IBM Security Access Manager 6.1, 7.0, 8.0, and 9.0 e-community configurations may be affected by a redirect vulnerability.
Impact
IBM Security Access Manager 6.1, 7.0, 8.0, and 9.0 e-community configurations may be affected by a redirect vulnerability. ECSSO Master Authentication can redirect to a server not participating in an e-community domain. IBM X-Force ID: 128687.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Tivoli Access Manager For E-Business | Versions 6.1.0, 6.1.0.1, 6.1.0.2, 6.1.0.3, 6.1.0.4, 6.1.0.5 |
| Ibm | Security Access Manager For Web Software | Versions 7.0, 7.0.0.1, 7.0.0.2, 7.0.0.3, 7.0.0.4, 7.0.0.5 |
| Ibm | Security Access Manager For Web Appliance | Versions 7.0, 7.0.0.1, 7.0.0.2, 7.0.0.3, 7.0.0.4, 7.0.0.5 |
| Ibm | Security Access Manager For Web | Versions 8.0, 8.0.0.0, 8.0.0.1, 8.0.0.2, 8.0.0.3, 8.0.0.4 |
| Ibm | Security Access Manager For Mobile | Versions 8.0, 8.0.0.0, 8.0.0.1, 8.0.0.2, 8.0.0.3, 8.0.0.4 |
| Ibm | Security Access Manager | Versions 9.0.0.0, 9.0.0.1, 9.0.1.0, 9.0.2.0, 9.0.2.1, 9.0.3.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.ibm.com/support/docview.wss?uid=swg22006959
- http://www.securityfocus.com/bid/100592
- http://www.securitytracker.com/id/1039227
- https://exchange.xforce.ibmcloud.com/vulnerabilities/128687
- http://www.ibm.com/support/docview.wss?uid=swg22006959
- http://www.securityfocus.com/bid/100592
- http://www.securitytracker.com/id/1039227
- https://exchange.xforce.ibmcloud.com/vulnerabilities/128687