Design/Logic Flaw

2020-05-2013:15:00

PRIOn knowledge base

www.prio-n.com

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.6%

JSON

IBM Security Access Manager Appliance 9.0.7.1 could allow an authenticated user to bypass security by allowing id_token claims manipulation without verification. IBM X-Force ID: 181481.

CPENameOperatorVersion
security_access_managerge9.0
security_access_managerlt9.0.7.1

CPE	Name	Operator	Version
	security_access_manager	ge	9.0
	security_access_manager	lt	9.0.7.1

References

exchange.xforce.ibmcloud.com/vulnerabilities/181481

www.ibm.com/support/pages/node/6211847