CVE-2017-1453

High

Published: 13/11/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

IBM Security Access Manager Appliance version 9.0.3 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands.

Risk Assessment

This vulnerability poses a serious risk to system security, allowing an attacker full control over the device. It could lead to data loss or system compromise.

Recommendation

It is recommended to update to the latest version of IBM Security Access Manager Appliance and implement appropriate security measures to mitigate the risk of this vulnerability.

Other vulnerabilities in IBM Security Access Manager Appliance 9.0.3

CVE-2017-1477High
IBM Security Access Manager Appliance version 9.0.3 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources.

Original NVD description (English source)

IBM Security Access Manager Appliance 9.0.3 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 128372.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS