← Back

CVE-2015-5013

nvd nist
Published: Feb 8, 2017Modified: May 13, 2026

JSON object

Loading...
5.5
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Exploitability: 1.8 / Impact: 3.6
Source: NVD

Description

The IBM Security Access Manager appliance includes configuration files that contain obfuscated plaintext-passwords which authenticated users can access.

Affected (3)

Ibm
3 products
Security Access Manager For Web 8.0 Firmware
Security Access Manager For Mobile
Security Access Manager 9.0 Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Security Access Manager For Web 8.0 Firmware
All versions
Running on/withPlatform Versions
Ibm
Security Access Manager For Web Appliance
Version 8.0
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Security Access Manager For Mobile
All versions
Running on/withPlatform Versions
Ibm
Security Access Manager For Mobile Appliance
Version 8.0
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Security Access Manager 9.0 Firmware
All versions
Running on/withPlatform Versions
Ibm
Security Access Manager 9.0
All versions

Related CWEs

CWE-522
Insufficiently Protected Credentials
The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

References (6)

Source: psirt@us.ibm.com
PatchVendor Advisory
Source: psirt@us.ibm.com
Third Party AdvisoryVDB Entry
Source: psirt@us.ibm.com
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry

Timeline

No history available yet.