5.3
Medium
CVE-2018-1886 IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 discloses sensitive information to…
Description
IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 152021.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Security Access Manager Appliance 9.0 | 9.0.1.0 → 9.0.5.0 | No fix stated |
Other CVEs of Security Access Manager Appliance
The 16 CVEs of Security Access Manager Appliance →
CVE-2020-4395
IBM Security Access Manager Appliance 9.0.7 does not invalidate session after logout which could allow an…
6.3
Medium
CVE-2019-4725
IBM Security Access Manager Appliance 9.0 is vulnerable to cross-site scripting
6.1
Medium
CVE-2020-4461
IBM Security Access Manager Appliance 9.0.7.1 could allow an authenticated user to bypass security by allowing…
6.5
Medium
CVE-2019-4707
IBM Security Access Manager Appliance 9.0.7.0 is vulnerable to an XML External Entity Injection (XXE) attack when…
7.1
High