Hard-coded Credentials Vulnerability in IBM Security Access Manager Appliance
CVE-2018-1887
Key Information:
- Vendor
- IBM
- Vendor
- CVE Published:
- 13 December 2018
Summary
The IBM Security Access Manager Appliance versions 9.0.1.0 through 9.0.5.0 contains a significant security vulnerability due to the presence of hard-coded credentials. These credentials, which include passwords or cryptographic keys, are employed for crucial processes such as inbound authentication, outbound communication with external systems, and the encryption of internal data. This vulnerability poses a risk as unauthorized entities may exploit these hard-coded credentials to gain access to sensitive operations and data. Organizations using affected versions are encouraged to apply security updates and review their security configurations promptly.
Affected Version(s)
Security Access Manager Appliance 9.0.1.0
Security Access Manager Appliance 9.0.2.0
Security Access Manager Appliance 9.0.3.0
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved