CVE-2017-1407

High

Published: 28/09/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

IBM Security Identity Manager Virtual Appliance versions 6.0 and 7.0 could allow a remote authenticated attacker to execute arbitrary commands on the system. An attacker could exploit this vulnerability by sending a specially-crafted request.

Risk Assessment

This vulnerability poses a serious risk to system security, allowing an attacker full control over the system. It could lead to data loss or compromise of system integrity.

Recommendation

It is recommended to upgrade to the latest version of IBM Security Identity Manager to mitigate the risk associated with this vulnerability. Additionally, monitoring systems for unauthorized activities is advised.

Other vulnerabilities in IBM Security Identity Manager Virtual Appliance

CVE-2016-9739High
IBM Security Identity Manager Virtual Appliance stores user credentials in plain text, which can be read by a local user.

Original NVD description (English source)

IBM Security Identity Manager Virtual Appliance 6.0 and 7.0 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 127394.