IBM Security Bulletin: IBM Security Access Manager is affected by a redirect vulnerability (CVE-2017-1489)
IBM Security Access Manager has addressed a possible redirect vulnerability in IBM Security Access Manager e-community configurations.
CVE(s): CVE-2017-1489
Affected product(s) and affected version(s):
Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2v9xxjW
X-Force Database: http://ift.tt/2vs9ZBO
The post IBM Security Bulletin: IBM Security Access Manager is affected by a redirect vulnerability (CVE-2017-1489) appeared first on IBM PSIRT Blog.
| Affected IBM Security Access Manager Appliance | Affected Versions |
| IBM Security Access Manager for Web (appliance) | 7.0 – 7.0.0.30 |
| IBM Security Access Manager for Web | 8.0 – 8.0.1.6 |
| IBM Security Access Manager for Mobile | 8.0 – 8.0.1.6 |
| IBM Security Access Manager | 9.0 – 9.0.3.0 IF1 |
| Affected IBM Security Access Manager Software | Affected Versions |
| IBM Tivoli Access Manager for e-business | 6.1 – 6.1.0.31 |
| IBM Tivoli Access Manager for e-business | 6.1.1 – 6.1.1.30 |
| IBM Security Access Manager for Web (software) | 7.0 – 7.0.0.30 |
from IBM Product Security Incident Response Team http://ift.tt/2v9uWpU