IBM Security Access Manager is a product for information security management applications from International Business Machines (IBM). The product enables access management control through integrated appliances for web, mobile and cloud computing. IBM Security Access Manager is vulnerable to a data forgery issue, which could be exploited by an attacker to download files from the wrong repository.