CVE-2023-38267: Missing Encryption of Sensitive Data

IBM Security Access Manager Appliance IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.6.1 could allow a local user to possibly elevate their privileges due to sensitive configuration information being exposed. IBM X-Force ID: 260584...

IBM Security Access Manager Appliance Access Control Error Vulnerability (CNVD-2022-87650)

The IBM Security Access Manager Appliance ISAM Appliance is a network appliance-based security solution from IBM of the United States. The product is primarily used for access control and Web-based threat protection, providing system performance monitoring, log analysis, and diagnostics.IBM...

Code injection

IBM Security Access Manager Appliance 10.0.0.0, 10.0.1.0, 10.0.2.0, and 10.0.3.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 225081...

CVE-2022-22463: Improper Neutralization of Special Elements used in an SQL Command

IBM Security Access Manager Appliance 10.0.0.0, 10.0.1.0, 10.0.2.0, and 10.0.3.0 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 22507...

PT-2022-15450

Name of the Vulnerable Software and Affected Versions IBM Security Access Manager Appliance versions 10.0.0.0 through 10.0.3.0 Description The issue is related to the use of weaker than expected cryptographic algorithms, which could allow an attacker to decrypt highly sensitive information...

PT-2022-15451

Name of the Vulnerable Software and Affected Versions IBM Security Access Manager Appliance versions 10.0.0.0 through 10.0.3.0 Description The issue allows a local user to obtain elevated privileges due to improper access permissions. Recommendations For versions 10.0.0.0 through 10.0.3.0, consid...

CVE-2022-22465: Undefined Security Weakness

IBM Security Access Manager Appliance 10.0.0.0, 10.0.1.0, 10.0.2.0, and 10.0.3.0 could allow a local user to obtain elevated privileges due to improper access permissions. IBM X-Force ID: 225082...

IBM Security Access Manager Appliance 加密问题漏洞

IBM Security Access Manager Appliance ISAM Appliance is a network appliance-based security solution from IBM, USA. The product is mainly used for access control and Web-based threat protection, providing system performance monitoring, log analysis and diagnosis. A security vulnerability exists in...

PT-2022-15449

Name of the Vulnerable Software and Affected Versions IBM Security Access Manager Appliance versions 10.0.0.0 through 10.0.3.0 Description The issue allows a remote attacker to send specially crafted SQL statements, which could enable the attacker to view, add, modify, or delete information in th...

CVE-2022-22464: Inadequate Encryption Strength

IBM Security Access Manager Appliance 10.0.0.0, 10.0.1.0, 10.0.2.0, and 10.0.3.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 225081...

Security Bulletin: IBM Security Access Manager has fixed a vulnerability in the log4j library shipped with the product. (CVE-2021-4104)

Summary The IBM Security Access Manager version 9.0 ships with a version of log4j that is vulnerable to CVE-2021-4104. The log4j library is no longer used by the IBM Security Access Manager product and a Fixpack has been provided to remove the unused library. Vulnerability Details CVEID:...

Security Bulletin: A security vulnerability has been identified in Log4j 2 used in IBM Guardium Data Encryption (GDE) (CVE-2021-44228)

Summary Log4j 2 is a logging package used by IBM Security Guardium Data Encryption GDE. That package has a security vulnerability. Consult the bulletin listed below for details. Vulnerability Details CVEID: CVE-2021-44228 DESCRIPTION: Apache Log4j could allow a remote attacker to execute arbitrar...

Micro Focus Access Manager Appliance 跨站脚本漏洞

Micro Focus Access Manager Appliance is an application from Micro Focus UK. It is used to improve security and simplify management. A cross-site scripting vulnerability exists in Micro Focus Access Manager product. An attacker could exploit the vulnerability to cause configuration corruption...

Micro Focus Access Manager Appliance 信息泄露漏洞

Micro Focus Access Manager Appliance is an application from Micro Focus UK. It is used to improve security and simplify management. An information disclosure vulnerability exists in Micro Focus Access Manager product, which can be exploited by attackers to expose information and disclose advanced...

CVE-2020-4395

IBM Security Access Manager Appliance 9.0.7 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 179358...

Security Bulletin: Security Vulnerabilities in IBM WebSphere Liberty fixed in IBM Security Access Manager Appliance

Summary A Security Vulnerability in IBM WebSphere Liberty has been fixed in the IBM Security Access Manager Appliance Vulnerability Details CVEID: CVE-2019-4441 DESCRIPTION: IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0, and Liberty could allow a remote attacker to obtain sensitive...

PT-2020-18046

Name of the Vulnerable Software and Affected Versions IBM Security Access Manager Appliance version 9.0.7 Description The issue allows an authenticated user to impersonate another user on the system because the session is not invalidated after logout. Recommendations For IBM Security Access Manag...

CVE-2020-4395: Insufficient Session Expiration

IBM Security Access Manager Appliance 9.0.7 does not invalidate session after logout which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 179358...

PT-2020-11044

Name of the Vulnerable Software and Affected Versions IBM Security Access Manager Appliance version 9.0 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted...

CVE-2019-4725: Improper Neutralization of Input During Web Page Generation

IBM Security Access Manager Appliance 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 172131...