CVE-2017-1480medium

CVE-2017-1480: medium-severity vulnerability in IBM Security Access Manager

Published · Updated

Follow this CVE+ Monitor Security Access Manager

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 4.3epss 1.7%
IBM Security Access Manager Appliance 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 stores potentially sensitive information in log files that could be read by a remote user. IBM X-Force ID: 128617.
CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:L/S:U/UI:N/E:U/RC:C/RL:O
Affected products
IBM · Security Access Manager
Related CVEs — IBM Security Access Manager

In the same product, most dangerous first.

CVE-2017-1453—CVE-2017-1453EPSS 2.9%CVE-2017-1476MEDIUMCVE-2017-1476EPSS 2.2%CVE-2017-1474MEDIUMCVE-2017-1474EPSS 1.7%CVE-2019-4135HIGHCVE-2019-4135EPSS 1.5%CVE-2017-1477—CVE-2017-1477EPSS 1.4%CVE-2019-4036HIGHCVE-2019-4036EPSS 1.4%