Lucene search

IbmCVE-2017-1453

HistoryNov 13, 2017 - 11:29 p.m.

CVE-2017-1453

2017-11-1323:29:00

CWE-78

ibm

web.nvd.nist.gov

ibm security

access manager

appliance

9.0.3

remote command execution

vulnerability

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.5

Confidence

High

EPSS

0.002

Percentile

59.3%

JSON

IBM Security Access Manager Appliance 9.0.3 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 128372.

Affected configurations

Nvd

Vulners

Node

ibmsecurity_access_manager_9.0_firmwareMatch9.0.3.0

VendorProductVersionCPE
ibmsecurity_access_manager_9.0_firmware9.0.3.0cpe:2.3:o:ibm:security_access_manager_9.0_firmware:9.0.3.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	security_access_manager_9.0_firmware	9.0.3.0	cpe:2.3:o:ibm:security_access_manager_9.0_firmware:9.0.3.0:::::::*

CNA Affected

[
  {
    "product": "Security Access Manager",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "9.0.3"
      }
    ]
  }
]

References

www.ibm.com/support/docview.wss?uid=swg22009242

exchange.xforce.ibmcloud.com/vulnerabilities/128372

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.5

Confidence

High

EPSS

0.002

Percentile

59.3%

JSON

Related for CVE-2017-1453