KLA10523 Multiple vulnerabilities in IBM SAM

Lack of unicast respond restrictions was found in IBM SAM. By exploiting this vulnerability malicious users cause denial of service or obtain sensitive information. This vulnerability can be exploited remotely via a specially designed packets.

Original advisories

IBM advisory

Related products

IBM-Security-Access-Manager

CVE list

CVE-2015-1892 critical

Solution

Update to the latest version

Impacts

• OSI

Obtain sensitive information. Exploitation of vulnerabilities with this impact can lead to capturing by abuser information, critical for user or system.

• DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

Affected Products

• IBM Security Access Manager for Web 7 versions earlier than 7.0.0 FP12BM Security Access Manager for Web 8 versions earlier than 8.0.1 FP1