Description

IBM Security Access Manager Appliance 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 stores potentially sensitive information in log files that could be read by a remote user. IBM X-Force ID: 128617.

Remediation

References

CVE-2017-1480

Related Vulnerabilities

Oracle Database Server CVE-2014-6455 Vulnerability (CVE-2014-6455)

Apache Tomcat Numeric Errors Vulnerability (CVE-2012-0022)

WordPress 4.1.x Prototype Pollution (4.1 - 4.1.34)

Roundcube Cross-site Scripting (XSS) Vulnerability (CVE-2016-4068)

MySQL CVE-2018-3277 Vulnerability (CVE-2018-3277)

Severity

Medium

Classification

CVE-2017-1480 CWE-532 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities