critical9.8
CVE-2020-4499
IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an unauthorized public Oauth client to bypass some or all of the authentica…
Impact
IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an unauthorized public Oauth client to bypass some or all of the authentication checks and gain access to applications. IBM X-Force ID: 182216.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Security Access Manager | from 9.0.7.0 before 9.0.7.2 |
| Ibm | Security Verify Access | from 10.0.0 before 10.0.0.1 |