CVE-2018-1813

published 2018-12-13

CVE-2018-1813: IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 uses incomplete blacklisting for input validation which allows attackers…

medium 6.5 CVSS 3.0

AV N AC L PR L UI N S U C N I H A N

IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity. IBM X-Force ID: 150017.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
ibm	security_access_manager	9.0.1.0 – 9.0.5.0	—
ibm	security_access_manager_appliance	—	—
ibm	security_access_manager_appliance	—	—
ibm	security_access_manager_appliance	—	—
ibm	security_access_manager_appliance	—	—
ibm	security_access_manager_appliance	—	—