CVE-2017-1474

CVSS 5.3 MEDIUMEPSS 1.8%

Vexday Risk Score

13Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 5.3EPSS 1.8%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

06 Jun 2018Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

IBM Security Access Manager Appliance 7.0.0, 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 128606.

CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O

Affected products

IBM · Security Access Manager

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/128606 http://www.ibm.com/support/docview.wss?uid=swg22012329 http://www.securityfocus.com/bid/104476