Code injection

2016-11-2503:59:00

PRIOn knowledge base

www.prio-n.com

7.6 High

AI Score

Confidence

Low

0.011 Low

EPSS

Percentile

84.4%

JSON

IBM Security Access Manager for Web 7.0 before IF2 and 8.0 before 8.0.1.4 IF3 and Security Access Manager 9.0 before 9.0.1.0 IF5 allow remote authenticated users to execute arbitrary commands by leveraging LMI admin access.

CPENameOperatorVersion
security_access_managereq9.0.0
security_access_managereq9.0.0.1
security_access_managereq9.0.1.0
security_access_manager_for_webeq8.0.1.2
security_access_manager_for_webeq8.0.0.5
security_access_manager_for_webeq8.0.1
security_access_manager_for_webeq8.0.0.2
security_access_manager_for_webeq8.0.1.3
security_access_manager_for_webeq7.0.0
security_access_manager_for_webeq8.0.0

Name	Operator	Version
security_access_manager	eq	9.0.0
security_access_manager	eq	9.0.0.1
security_access_manager	eq	9.0.1.0
security_access_manager_for_web	eq	8.0.1.2
security_access_manager_for_web	eq	8.0.0.5
security_access_manager_for_web	eq	8.0.1
security_access_manager_for_web	eq	8.0.0.2
security_access_manager_for_web	eq	8.0.1.3
security_access_manager_for_web	eq	7.0.0
security_access_manager_for_web	eq	8.0.0