Design/Logic Flaw

2016-01-0205:59:00

PRIOn knowledge base

www.prio-n.com

7.6 High

AI Score

Confidence

Low

0.014 Low

EPSS

Percentile

86.6%

JSON

IBM Security Access Manager for Web 7.0.0 before FP19 and 8.0 before 8.0.1.3 IF3, and Security Access Manager 9.0 before 9.0.0.0 IF1, allows remote authenticated users to execute arbitrary OS commands by leveraging Local Management Interface (LMI) access.

CPENameOperatorVersion
security_access_manager_9.0_firmwareeq9.0.0
security_access_manager_for_web_7.0_firmwareeq7.0.0.7
security_access_manager_for_web_7.0_firmwareeq7.0.0.2
security_access_manager_for_web_7.0_firmwareeq7.0.0.11
security_access_manager_for_web_7.0_firmwareeq7.0.0.12
security_access_manager_for_web_7.0_firmwareeq7.0.0.15
security_access_manager_for_web_7.0_firmwareeq7.0.0.4
security_access_manager_for_web_7.0_firmwareeq7.0.0.14
security_access_manager_for_web_7.0_firmwareeq7.0.0.13
security_access_manager_for_web_7.0_firmwareeq7.0.0.5

Name	Operator	Version
security_access_manager_9.0_firmware	eq	9.0.0
security_access_manager_for_web_7.0_firmware	eq	7.0.0.7
security_access_manager_for_web_7.0_firmware	eq	7.0.0.2
security_access_manager_for_web_7.0_firmware	eq	7.0.0.11
security_access_manager_for_web_7.0_firmware	eq	7.0.0.12
security_access_manager_for_web_7.0_firmware	eq	7.0.0.15
security_access_manager_for_web_7.0_firmware	eq	7.0.0.4
security_access_manager_for_web_7.0_firmware	eq	7.0.0.14
security_access_manager_for_web_7.0_firmware	eq	7.0.0.13
security_access_manager_for_web_7.0_firmware	eq	7.0.0.5