CVE-2017-1483

High

Published: 28/09/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

IBM Security Identity Manager Adapters versions 6.0 and 7.0 do not perform an authentication check for critical resources or functionality, allowing anonymous users access to protected areas.

Risk Assessment

The lack of proper authentication checks may lead to unauthorized access to sensitive data, posing a serious security threat to the organization.

Recommendation

It is recommended to upgrade to the latest version of the software that implements appropriate authentication mechanisms for protected resources.

Other vulnerabilities in IBM Security Identity Manager Adapters 6.0 and 7.0

CVE-2017-1362High
IBM Security Identity Manager Adapters versions 6.0 and 7.0 store user credentials in plain text, which can be read by a local user.

Original NVD description (English source)

IBM Security Identity Manager Adapters 6.0 and 7.0 does not perform an authentication check for a critical resource or functionality allowing anonymous users access to protected areas. IBM X-Force ID: 128621.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS