CVE-2019-4158 — Missing Authorization in IBM Security Access Manager

CWE-862 — Missing Authorization3 documents3 sources
Severity
5.4MEDIUMNVD
EPSS
0.1%
top 74.73%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Security Access Manager
Timeline
PublishedJun 25
Latest updateMay 24

Description

IBM Security Access Manager 9.0.1 through 9.0.6 does not prove that a user's identity is correct which can lead to the exposure of resources or functionality to unintended actors. IBM X-Force ID: 158574.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:NExploitability: 2.8 | Impact: 2.5

Affected Packages2 packages

▶NVDibm/security_access_manager9.0.1 — 9.0.6
▶CVEListV5ibm/security_access_manager6 versions+5

Patches

Patch: www.ibm.com ↗Patch: www.ibm.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-cwgh-cf2v-vqfh: IBM Security Access Manager 9↗2022-05-24
▶
CVEList
CVE-2019-4158: IBM Security Access Manager 9↗2019-06-25
▶
CVE-2019-4158 — Missing Authorization in IBM | cvebase