CVE-2017-1480

CVE-2017-1480 affects IBM Security Access Manager Appliance: Web 8.0–8.0.1.6, Mobile 8.0–8.0.1.6, and ISAM 9.0–9.0.3.1. The issue is an information exposure where potentially sensitive data stored in log files could be read by a remote user. CVSS v3 base score is 4.3 (MEDIUM). Remediation provide...

CVE-2017-1474

CVE-2017-1474 affects IBM Security Access Manager family. The IBM advisory lists affected versions: IBM Security Access Manager for Web 7.0–7.0.0.33, 8.0–8.0.1.6; IBM Security Access Manager for Mobile 8.0–8.0.1.6; IBM Security Access Manager Appliance 9.0–9.0.3.1; IBM Tivoli Access Manager for e...

CVE-2017-1480

IBM Security Access Manager Appliance 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 stores potentially sensitive information in log files that could be read by a remote user. IBM X-Force ID: 128617...

Oracle Access Manager Multiple Vulnerabilities (Apr 2018 CPU)

The version of Oracle Access Manager installed on the remote host is affected by multiple vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid109733; scriptversion"1.8";...

Oracle Access Manager 11.1.2.3.0 / 12.2.1.3.0 Authentication Bypass Vulnerability

Oracle Access Manager versions 11.1.2.3.0 and 12.2.1.3.0 suffer from an authentication bypass vulnerability. We have published an accompanying blog post to this technical advisory with further information: Blog: https://www.sec-consult.com/en/blog/2018/05/oracle-access-managers-identity-crisis/...

Oracle Adaptive Access Manager Component Remote Vulnerability

Oracle Fusion Middleware Oracle Fusion Middleware is a set of Oracle's business innovation platform for enterprise and cloud environments, which provides middleware, software collections, and other capabilities.Adaptive Access Manager is one of the authentication components. A security...

Oracle Access Manager Component Remote Vulnerability

Oracle Fusion Middleware Oracle Fusion Middleware is a set of Oracle's business innovation platform for enterprise and cloud environments, which provides middleware, software collections, and other capabilities.Access Manager is one of the components that provides identity management,...

Oracle Access Manager Component Remote Vulnerability (CNVD-2018-09094)

Oracle Fusion Middleware Oracle Fusion Middleware is a set of Oracle's business innovation platform for enterprise and cloud environments, which provides middleware, software collections, and other capabilities.Access Manager is one of the components that provides identity management,...

IBM Security Access Manager Appliance Information Disclosure Vulnerability

IBM Security Access Manager Appliance is an application for information security management from IBM, USA. The program enables access management control through an integrated appliance for web, mobile and cloud computing. A security vulnerability exists in IBM Security Access Manager Appliance th...

Code injection

IBM Security Access Manager Appliance 8.0.0 through 8.0.1.6 and 9.0.0 through 9.0.3.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 128605...

CVE-2017-1473

IBM Security Access Manager Appliance 8.0.0 through 8.0.1.6 and 9.0.0 through 9.0.3.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 128605...

CVE-2017-1473

IBM Security Access Manager Appliance 8.0.0 through 8.0.1.6 and 9.0.0 through 9.0.3.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 128605...

CVE-2017-1473

IBM Security Access Manager Appliance 8.0.0 through 8.0.1.6 and 9.0.0 through 9.0.3.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 128605...

CVE-2017-1473

CVE-2017-1473 affects IBM Security Access Manager Appliance: versions 8.0.0–8.0.1.6 and 9.0.0–9.0.3.1 use weaker cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM’s advisory (IBM Security Access Manager Appliance) lists remediation: upgrade to 8.0....

Oracle Access Manager Remote Vulnerability (CNVD-2018-09095)

Oracle Access Manager is the latest solution for centralized identity management and access control. A remote security vulnerability exists in the Oracle Access Manager component that can be exploited by an unauthenticated, remote attacker to compromise integrity, confidentiality, and availabilit...

CVE-2018-2879

Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware subcomponent: Authentication Engine. Supported versions that are affected are 11.1.2.3.0 and 12.2.1.3.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2018-2879

Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware subcomponent: Authentication Engine. Supported versions that are affected are 11.1.2.3.0 and 12.2.1.3.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2018-2770

Vulnerability in the Oracle Adaptive Access Manager component of Oracle Fusion Middleware subcomponent: OAAM Admin. The supported version that is affected is 11.1.2.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Adaptive Acce...

CVE-2018-2770

Vulnerability in the Oracle Adaptive Access Manager component of Oracle Fusion Middleware subcomponent: OAAM Admin. The supported version that is affected is 11.1.2.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Adaptive Acce...

CVE-2018-2587

Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware subcomponent: Web Server Plugin. Supported versions that are affected are 10.1.4.3.0, 11.1.2.3.0 and 12.2.1.3.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to...