Vulnerability Details CVE-2017-1483
IBM Security Identity Manager Adapters 6.0 and 7.0 does not perform an authentication check for a critical resource or functionality allowing anonymous users access to protected areas. IBM X-Force ID: 128621.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 66.0%
CVSS Severity
CVSS v3 Score 8.6
CVSS v2 Score 7.5
References
- http://www.ibm.com/support/docview.wss?uid=swg22007375
- http://www.securityfocus.com/bid/101013
- https://exchange.xforce.ibmcloud.com/vulnerabilities/128621
- http://www.ibm.com/support/docview.wss?uid=swg22007375
- http://www.securityfocus.com/bid/101013
- https://exchange.xforce.ibmcloud.com/vulnerabilities/128621
Products affected by CVE-2017-1483
-
cpe:2.3:a:ibm:security_identity_governance_and_intelligence:5.2
-
cpe:2.3:a:ibm:security_identity_governance_and_intelligence:5.2.1
-
cpe:2.3:a:ibm:security_identity_manager:6.0.0.0
-
cpe:2.3:a:ibm:security_identity_manager:7.0.0.0
-
cpe:2.3:a:ibm:security_privileged_identity_manager:2.0
-
cpe:2.3:a:ibm:security_privileged_identity_manager:2.0.1
-
cpe:2.3:a:ibm:security_privileged_identity_manager:2.0.2