CVE-2017-1407

Published: Sep 28, 2017Modified: May 13, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

IBM Security Identity Manager Virtual Appliance 6.0 and 7.0 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 127394.

Affected (7)

Products: Ibm: Security Identity Governance And Intelligence, Security Identity Manager, Security Privileged Identity Manager

Ibm

3 products

Security Identity Governance And Intelligence

Security Identity Manager

Security Privileged Identity Manager

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Ibm Security Identity Governance And Intelligence	Version 5.2.0
Ibm Security Identity Governance And Intelligence	Version 5.2.1
Ibm Security Identity Manager	Version 6.0.0.0
Ibm Security Identity Manager	Version 7.0.0.0
Ibm Security Privileged Identity Manager	Version 2.0.0
Ibm Security Privileged Identity Manager	Version 2.0.1
Ibm Security Privileged Identity Manager	Version 2.0.2