CVE-2018-1887

published 2018-12-13

CVE-2018-1887: IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 contains hard-coded credentials, such as a password or cryptographic key…

high 7.8 CVSS 3.0

AV L AC L PR L UI N S U C H I H A H

IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 152078.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
ibm	security_access_manager	9.0.1.0 – 9.0.5.0	—
ibm	security_access_manager_appliance	—	—
ibm	security_access_manager_appliance	—	—
ibm	security_access_manager_appliance	—	—
ibm	security_access_manager_appliance	—	—
ibm	security_access_manager_appliance	—	—

CWE-798