CVE-2017-1480

MEDIUM

IBM Security Access Manager < 9.0.3.1 - Log Information Exposure

Title source: rule

Description

IBM Security Access Manager Appliance 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 stores potentially sensitive information in log files that could be read by a remote user. IBM X-Force ID: 128617.

References (3)

Core 3

Core References

Patch, Vendor Advisory x_refsource_confirm

http://www.ibm.com/support/docview.wss?uid=swg22012309

VDB Entry, Vendor Advisory vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/128617

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/104471

Scores

CVSS v3 4.3

EPSS 0.0013

EPSS Percentile 31.8%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Details

CWE

CWE-532

Status published

Products (3)

ibm/security_access_manager 9.0.0 - 9.0.3.1

ibm/security_access_manager_for_mobile 8.0.0 - 8.0.1.6

ibm/security_access_manager_for_web 8.0.0 - 8.0.1.6

Published Jun 06, 2018

Tracked Since Feb 18, 2026