CVE-2017-1483
First published: Wed Sep 27 2017(Updated: )
IBM Security Identity Manager Adapters 6.0 and 7.0 does not perform an authentication check for a critical resource or functionality allowing anonymous users access to protected areas. IBM X-Force ID: 128621.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Security Identity Governance and Intelligence | =5.2 | |
| IBM Security Identity Governance and Intelligence | =5.2.1 | |
| IBM Security Identity Manager | =6.0.0.0 | |
| IBM Security Identity Manager | =7.0.0.0 | |
| IBM Security Privileged Identity Manager Virtual Appliance | =2.0 | |
| IBM Security Privileged Identity Manager Virtual Appliance | =2.0.1 | |
| IBM Security Privileged Identity Manager Virtual Appliance | =2.0.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-1483?
CVE-2017-1483 has a high severity rating due to the impact of allowing unauthorized access to critical resources.
How do I fix CVE-2017-1483?
Fixing CVE-2017-1483 requires updating IBM Security Identity Manager and its adapters to the latest patched versions.
Which versions are affected by CVE-2017-1483?
CVE-2017-1483 affects IBM Security Identity Manager versions 6.0.0.0 and 7.0.0.0, as well as versions of IBM Security Identity Governance and Intelligence and IBM Security Privileged Identity Manager.
What impact does CVE-2017-1483 have on my system?
CVE-2017-1483 allows anonymous users to access protected areas, potentially leading to data exposure and unauthorized actions.
Is CVE-2017-1483 easy to exploit?
Yes, CVE-2017-1483 can be easily exploited by removing or bypassing authentication checks.
- agent/type
- agent/softwarecombine
- agent/weakness
- agent/severity
- agent/references
- agent/author
- agent/remedy
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- agent/first-publish-date
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/ibm
- canonical/ibm security identity governance and intelligence
- version/ibm security identity governance and intelligence/5.2
- version/ibm security identity governance and intelligence/5.2.1
- canonical/ibm security identity manager
- version/ibm security identity manager/6.0.0.0
- version/ibm security identity manager/7.0.0.0
- canonical/ibm security privileged identity manager virtual appliance
- version/ibm security privileged identity manager virtual appliance/2.0
- version/ibm security privileged identity manager virtual appliance/2.0.1
- version/ibm security privileged identity manager virtual appliance/2.0.2