CVE-2014-4823

High

Published: 03/10/2014(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

The administration console in IBM Security Access Manager for Web 7.x before 7.0.0-ISS-WGA-IF0009 and 8.x before 8.0.0-ISS-WGA-FP0005, and Security Access Manager for Mobile 8.x before 8.0.0-ISS-ISAM-FP0005, allows remote attackers to inject system commands via unspecified vectors.

Risk Assessment

Attackers may exploit this vulnerability to remotely execute system commands, potentially leading to system compromise and data leakage.

Recommendation

It is recommended to upgrade to the latest versions of the software that address this vulnerability and to monitor systems for unauthorized activities.

Other vulnerabilities in IBM Security Access Manager for Web, IBM Security Access Manager for Mobile

CVE-2015-5018High
IBM Security Access Manager for Web versions 7.0.0 before FP19, 8.0 before 8.0.1.3 IF3, and Security Access Manager 9.0 before 9.0.0.0 IF1 allows remote authenticated users to execute arbitrary OS commands by leveraging Local Management Interface (LMI) access.

Original NVD description (English source)