CVE-2019-4153: Medium severity oracle access manager vulnerability
IBM Security Access Manager 9.0.1 through 9.0.6 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 158517.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2019-4153.
What is the severity rating of CVE-2019-4153?
The severity rating of CVE-2019-4153 is medium (6.8).
What is the affected software for CVE-2019-4153?
The affected software for CVE-2019-4153 is IBM Security Access Manager versions 9.0.1 through 9.0.6.
How can a remote attacker exploit CVE-2019-4153?
A remote attacker can exploit CVE-2019-4153 by conducting phishing attacks using an open redirect attack.
Are there any references available for CVE-2019-4153?
Yes, you can refer to the following links for more information about CVE-2019-4153: [1] [2]