Description

IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 152078.

Remediation

References

CVE-2018-1887

Related Vulnerabilities

Tornado Observable Differences in Behavior to Error Inputs Vulnerability (CVE-2014-9720)

PHP Numeric Errors Vulnerability (CVE-2016-4344)

TYPO3 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-26227)

OpenSSL Improper Access Control Vulnerability (CVE-2016-7054)

WordPress Plugin WP E-Signature Remote Code Execution (1.5.6.5)

Severity

High

Classification

CVE-2018-1887 CWE-798 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities