CVE-2017-1483: High severity ibm security identity governance and intelligence vulnerability

Published Sep 27, 2017

Updated

IBM Security Identity Manager Adapters 6.0 and 7.0 does not perform an authentication check for a critical resource or functionality allowing anonymous users access to protected areas. IBM X-Force ID: 128621.

Affected Software

7 affected components

IBM Security Identity Governance and Intelligence=5.2

IBM Security Identity Governance and Intelligence=5.2.1

IBM Security Identity Manager=6.0.0.0

IBM Security Identity Manager=7.0.0.0

IBM Security Privileged Identity Manager=2.0

IBM Security Privileged Identity Manager=2.0.1

IBM Security Privileged Identity Manager=2.0.2

Remediation

Patch Available

http://www.ibm.com/support/docview.wss?uid=swg22007375

Event History

Sep 27, 2017

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-1483?

CVE-2017-1483 has a high severity rating due to the impact of allowing unauthorized access to critical resources.

How do I fix CVE-2017-1483?

Fixing CVE-2017-1483 requires updating IBM Security Identity Manager and its adapters to the latest patched versions.

Which versions are affected by CVE-2017-1483?

CVE-2017-1483 affects IBM Security Identity Manager versions 6.0.0.0 and 7.0.0.0, as well as versions of IBM Security Identity Governance and Intelligence and IBM Security Privileged Identity Manager.

What impact does CVE-2017-1483 have on my system?

CVE-2017-1483 allows anonymous users to access protected areas, potentially leading to data exposure and unauthorized actions.

Is CVE-2017-1483 easy to exploit?

Yes, CVE-2017-1483 can be easily exploited by removing or bypassing authentication checks.