Hard-coded Credentials Vulnerability in IBM Security Access Manager Appliance
CVE-2018-1887

5.9MEDIUM

Key Information:

Vendor
IBM
Vendor
CVE Published:
13 December 2018

Summary

The IBM Security Access Manager Appliance versions 9.0.1.0 through 9.0.5.0 contains a significant security vulnerability due to the presence of hard-coded credentials. These credentials, which include passwords or cryptographic keys, are employed for crucial processes such as inbound authentication, outbound communication with external systems, and the encryption of internal data. This vulnerability poses a risk as unauthorized entities may exploit these hard-coded credentials to gain access to sensitive operations and data. Organizations using affected versions are encouraged to apply security updates and review their security configurations promptly.

Affected Version(s)

Security Access Manager Appliance 9.0.1.0

Security Access Manager Appliance 9.0.2.0

Security Access Manager Appliance 9.0.3.0

References

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.