Skip to content
OpenAdvisories
Medium · 4.3 CVE-2018-1813 EUVD-2018-12392GHSA-jgm8-vvh4-72gh

IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 uses incomplete blacklisting for input validation whi…

Published Dec 13, 2018 · Updated Sep 16, 2024 · Assigned by ibm

Description

IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, and 9.0.5.0 uses incomplete blacklisting for input validation which allows attackers to bypass application controls resulting in direct impact to the system and data integrity. IBM X-Force ID: 150017.

Affected products

VendorProductAffectedFixed
IBM Security Access Manager Appliance 9.0.1.0, 9.0.2.0, 9.0.3.0, 9.0.4.0, 9.0.5.0 —

References