CVE-2015-4963

CWE-173 documents3 sources
Severity
7.5HIGH
EPSS
0.8%
top 26.77%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Security Access Manager FOR WEB
Timeline
PublishedNov 8
Latest updateMay 17

Description

IBM Security Access Manager for Web 7.x before 7.0.0.16 and 8.x before 8.0.1.3 mishandles WebSEAL HTTPTransformation requests, which allows remote attackers to read or write to arbitrary files via unspecified vectors.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

▶NVDibm/security_access_manager26 versions+25

🔴Vulnerability Details

2
GHSA
GHSA-w26v-2648-53f9: IBM Security Access Manager for Web 7↗2022-05-17
▶
CVEList
CVE-2015-4963: IBM Security Access Manager for Web 7↗2015-11-08
▶