Описание
IBM Security Access Manager Appliance 8.0.0 and 9.0.0 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. IBM X-Force ID: 128378.
Ссылки
- Vendor Advisory
- Third Party AdvisoryVDB Entry
- VDB EntryVendor Advisory
- Vendor Advisory
- Third Party AdvisoryVDB Entry
- VDB EntryVendor Advisory
Уязвимые конфигурации
Конфигурация 1
Одновременно
cpe:2.3:o:ibm:security_access_manager_for_web_8.0_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:ibm:security_access_manager_for_web_appliance:8.0:*:*:*:*:*:*:*
Конфигурация 2
Одновременно
cpe:2.3:a:ibm:security_access_manager_for_mobile:*:*:*:*:*:*:*:*
cpe:2.3:h:ibm:security_access_manager_for_mobile_appliance:8.0:*:*:*:*:*:*:*
Конфигурация 3
Одновременно
cpe:2.3:o:ibm:security_access_manager_9.0_firmware:*:*:*:*:*:*:*:*
EPSS
Процентиль: 29%
0.00102
Низкий
4.2 Medium
CVSS3
4.9 Medium
CVSS2
Дефекты
CWE-732
Связанные уязвимости
CVSS3: 4.2
github
больше 3 лет назад
IBM Security Access Manager Appliance 8.0.0 and 9.0.0 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. IBM X-Force ID: 128378.
EPSS
Процентиль: 29%
0.00102
Низкий
4.2 Medium
CVSS3
4.9 Medium
CVSS2
Дефекты
CWE-732