CVE-2018-1722 | IBM Security Access Manager Appliance 9.0.4.0 and 9.0.5.0 co… | CVSS 10.0 CRITICAL

Description

IBM Security Access Manager Appliance 9.0.4.0 and 9.0.5.0 could allow remote code execution when Advanced Access Control or Federation services are running. IBM X-Force ID: 147370.

Metadata

CVE ID: CVE-2018-1722
State: PUBLISHED
Assigner: ibm
Reserved: 2017-12-13 00:00 UTC
Published: 2018-08-24 11:00 UTC
Last updated: 2024-09-16 22:03 UTC
Vendor / Product: IBM / Security Access Manager Appliance
Sources: cve.org · NVD

Severity & Metrics

10.0 CRITICAL CVSS 3.0

CVSS:3.0/A:H/AC:L/AV:N/C:H/I:H/PR:N/S:C/UI:N/E:U/RC:C/RL:O

Affected products (1)

Vendor	Product	Platform	Versions
IBM	Security Access Manager Appliance	—	9.0.4.0, 9.0.5.0

Weakness (CWE)

CWE	Source	Description
—	cna	Gain Access

CVSS scores (1)

Score	Severity	Version	Source	Vector
10.0	CRITICAL	3.0	cna	CVSS:3.0/A:H/AC:L/AV:N/C:H/I:H/PR:N/S:C/UI:N/E:U/RC:C/RL:O

References (4)

https://www.ibm.com/support/docview.wss?uid=ibm10719623
1041557 http://www.securitytracker.com/id/1041557
105145 http://www.securityfocus.com/bid/105145
ibm-sam-cve20181722-code-exec(147370) https://exchange.xforce.ibmcloud.com/vulnerabilities/147370