CVE-2017-1489

Published: Aug 29, 2017Modified: May 13, 2026

6.1

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

IBM Security Access Manager 6.1, 7.0, 8.0, and 9.0 e-community configurations may be affected by a redirect vulnerability. ECSSO Master Authentication can redirect to a server not participating in an e-community domain. IBM X-Force ID: 128687.

Affected (164)

Products: Ibm: Tivoli Access Manager For E Business, Security Access Manager For Web Software, Security Access Manager For Web Appliance, Security Access Manager For Web, Security Access Manager For Mobile, Security Access Manager

Ibm

6 products

Tivoli Access Manager For E Business

Security Access Manager For Web Software

Security Access Manager For Web Appliance

Security Access Manager For Web

Security Access Manager For Mobile

Security Access Manager

Configuration A

32 vulnerable

Vulnerable Software	Affected Versions
Ibm Tivoli Access Manager For E Business	Version 6.1.0.10
Ibm Tivoli Access Manager For E Business	Version 6.1.0.11
Ibm Tivoli Access Manager For E Business	Version 6.1.0.12
Ibm Tivoli Access Manager For E Business	Version 6.1.0.13
Ibm Tivoli Access Manager For E Business	Version 6.1.0.14
Ibm Tivoli Access Manager For E Business	Version 6.1.0.15
Ibm Tivoli Access Manager For E Business	Version 6.1.0.16
Ibm Tivoli Access Manager For E Business	Version 6.1.0.17
Ibm Tivoli Access Manager For E Business	Version 6.1.0.18
Ibm Tivoli Access Manager For E Business	Version 6.1.0.19
Ibm Tivoli Access Manager For E Business	Version 6.1.0.1
Ibm Tivoli Access Manager For E Business	Version 6.1.0.20
Ibm Tivoli Access Manager For E Business	Version 6.1.0.21
Ibm Tivoli Access Manager For E Business	Version 6.1.0.22
Ibm Tivoli Access Manager For E Business	Version 6.1.0.23
Ibm Tivoli Access Manager For E Business	Version 6.1.0.24
Ibm Tivoli Access Manager For E Business	Version 6.1.0.25
Ibm Tivoli Access Manager For E Business	Version 6.1.0.26
Ibm Tivoli Access Manager For E Business	Version 6.1.0.27
Ibm Tivoli Access Manager For E Business	Version 6.1.0.28
Ibm Tivoli Access Manager For E Business	Version 6.1.0.29
Ibm Tivoli Access Manager For E Business	Version 6.1.0.2
Ibm Tivoli Access Manager For E Business	Version 6.1.0.30
Ibm Tivoli Access Manager For E Business	Version 6.1.0.31
Ibm Tivoli Access Manager For E Business	Version 6.1.0.3
Ibm Tivoli Access Manager For E Business	Version 6.1.0.4
Ibm Tivoli Access Manager For E Business	Version 6.1.0.5
Ibm Tivoli Access Manager For E Business	Version 6.1.0.6
Ibm Tivoli Access Manager For E Business	Version 6.1.0.7
Ibm Tivoli Access Manager For E Business	Version 6.1.0.8
Ibm Tivoli Access Manager For E Business	Version 6.1.0.9
Ibm Tivoli Access Manager For E Business	Version 6.1.0

Configuration B

31 vulnerable

Vulnerable Software	Affected Versions
Ibm Tivoli Access Manager For E Business	Version 6.1.1.10
Ibm Tivoli Access Manager For E Business	Version 6.1.1.11
Ibm Tivoli Access Manager For E Business	Version 6.1.1.12
Ibm Tivoli Access Manager For E Business	Version 6.1.1.13
Ibm Tivoli Access Manager For E Business	Version 6.1.1.14
Ibm Tivoli Access Manager For E Business	Version 6.1.1.15
Ibm Tivoli Access Manager For E Business	Version 6.1.1.16
Ibm Tivoli Access Manager For E Business	Version 6.1.1.17
Ibm Tivoli Access Manager For E Business	Version 6.1.1.18
Ibm Tivoli Access Manager For E Business	Version 6.1.1.19
Ibm Tivoli Access Manager For E Business	Version 6.1.1.1
Ibm Tivoli Access Manager For E Business	Version 6.1.1.20
Ibm Tivoli Access Manager For E Business	Version 6.1.1.21
Ibm Tivoli Access Manager For E Business	Version 6.1.1.22
Ibm Tivoli Access Manager For E Business	Version 6.1.1.23
Ibm Tivoli Access Manager For E Business	Version 6.1.1.24
Ibm Tivoli Access Manager For E Business	Version 6.1.1.25
Ibm Tivoli Access Manager For E Business	Version 6.1.1.26
Ibm Tivoli Access Manager For E Business	Version 6.1.1.27
Ibm Tivoli Access Manager For E Business	Version 6.1.1.28
Ibm Tivoli Access Manager For E Business	Version 6.1.1.29
Ibm Tivoli Access Manager For E Business	Version 6.1.1.2
Ibm Tivoli Access Manager For E Business	Version 6.1.1.30
Ibm Tivoli Access Manager For E Business	Version 6.1.1.3
Ibm Tivoli Access Manager For E Business	Version 6.1.1.4
Ibm Tivoli Access Manager For E Business	Version 6.1.1.5
Ibm Tivoli Access Manager For E Business	Version 6.1.1.6
Ibm Tivoli Access Manager For E Business	Version 6.1.1.7
Ibm Tivoli Access Manager For E Business	Version 6.1.1.8
Ibm Tivoli Access Manager For E Business	Version 6.1.1.9
Ibm Tivoli Access Manager For E Business	Version 6.1.1

Configuration C

31 vulnerable

Vulnerable Software	Affected Versions
Ibm Security Access Manager For Web Software	Version 7.0.0.10
Ibm Security Access Manager For Web Software	Version 7.0.0.11
Ibm Security Access Manager For Web Software	Version 7.0.0.12
Ibm Security Access Manager For Web Software	Version 7.0.0.13
Ibm Security Access Manager For Web Software	Version 7.0.0.14
Ibm Security Access Manager For Web Software	Version 7.0.0.15
Ibm Security Access Manager For Web Software	Version 7.0.0.16
Ibm Security Access Manager For Web Software	Version 7.0.0.17
Ibm Security Access Manager For Web Software	Version 7.0.0.18
Ibm Security Access Manager For Web Software	Version 7.0.0.19
Ibm Security Access Manager For Web Software	Version 7.0.0.1
Ibm Security Access Manager For Web Software	Version 7.0.0.20
Ibm Security Access Manager For Web Software	Version 7.0.0.21
Ibm Security Access Manager For Web Software	Version 7.0.0.22
Ibm Security Access Manager For Web Software	Version 7.0.0.23
Ibm Security Access Manager For Web Software	Version 7.0.0.24
Ibm Security Access Manager For Web Software	Version 7.0.0.25
Ibm Security Access Manager For Web Software	Version 7.0.0.26
Ibm Security Access Manager For Web Software	Version 7.0.0.27
Ibm Security Access Manager For Web Software	Version 7.0.0.28
Ibm Security Access Manager For Web Software	Version 7.0.0.29
Ibm Security Access Manager For Web Software	Version 7.0.0.2
Ibm Security Access Manager For Web Software	Version 7.0.0.30
Ibm Security Access Manager For Web Software	Version 7.0.0.3
Ibm Security Access Manager For Web Software	Version 7.0.0.4
Ibm Security Access Manager For Web Software	Version 7.0.0.5
Ibm Security Access Manager For Web Software	Version 7.0.0.6
Ibm Security Access Manager For Web Software	Version 7.0.0.7
Ibm Security Access Manager For Web Software	Version 7.0.0.8
Ibm Security Access Manager For Web Software	Version 7.0.0.9
Ibm Security Access Manager For Web Software	Version 7.0

Configuration D

31 vulnerable

Vulnerable Software	Affected Versions
Ibm Security Access Manager For Web Appliance	Version 7.0.0.10
Ibm Security Access Manager For Web Appliance	Version 7.0.0.11
Ibm Security Access Manager For Web Appliance	Version 7.0.0.12
Ibm Security Access Manager For Web Appliance	Version 7.0.0.13
Ibm Security Access Manager For Web Appliance	Version 7.0.0.14
Ibm Security Access Manager For Web Appliance	Version 7.0.0.15
Ibm Security Access Manager For Web Appliance	Version 7.0.0.16
Ibm Security Access Manager For Web Appliance	Version 7.0.0.17
Ibm Security Access Manager For Web Appliance	Version 7.0.0.18
Ibm Security Access Manager For Web Appliance	Version 7.0.0.19
Ibm Security Access Manager For Web Appliance	Version 7.0.0.1
Ibm Security Access Manager For Web Appliance	Version 7.0.0.20
Ibm Security Access Manager For Web Appliance	Version 7.0.0.21
Ibm Security Access Manager For Web Appliance	Version 7.0.0.22
Ibm Security Access Manager For Web Appliance	Version 7.0.0.23
Ibm Security Access Manager For Web Appliance	Version 7.0.0.24
Ibm Security Access Manager For Web Appliance	Version 7.0.0.25
Ibm Security Access Manager For Web Appliance	Version 7.0.0.26
Ibm Security Access Manager For Web Appliance	Version 7.0.0.27
Ibm Security Access Manager For Web Appliance	Version 7.0.0.28
Ibm Security Access Manager For Web Appliance	Version 7.0.0.29
Ibm Security Access Manager For Web Appliance	Version 7.0.0.2
Ibm Security Access Manager For Web Appliance	Version 7.0.0.30
Ibm Security Access Manager For Web Appliance	Version 7.0.0.3
Ibm Security Access Manager For Web Appliance	Version 7.0.0.4
Ibm Security Access Manager For Web Appliance	Version 7.0.0.5
Ibm Security Access Manager For Web Appliance	Version 7.0.0.6
Ibm Security Access Manager For Web Appliance	Version 7.0.0.7
Ibm Security Access Manager For Web Appliance	Version 7.0.0.8
Ibm Security Access Manager For Web Appliance	Version 7.0.0.9
Ibm Security Access Manager For Web Appliance	Version 7.0

Configuration E

16 vulnerable

Vulnerable Software	Affected Versions
Ibm Security Access Manager For Web	Version 8.0.0.0
Ibm Security Access Manager For Web	Version 8.0.0.1
Ibm Security Access Manager For Web	Version 8.0.0.22
Ibm Security Access Manager For Web	Version 8.0.0.2
Ibm Security Access Manager For Web	Version 8.0.0.31
Ibm Security Access Manager For Web	Version 8.0.0.3
Ibm Security Access Manager For Web	Version 8.0.0.4
Ibm Security Access Manager For Web	Version 8.0.0.5
Ibm Security Access Manager For Web	Version 8.0.1.0
Ibm Security Access Manager For Web	Version 8.0.1.1
Ibm Security Access Manager For Web	Version 8.0.1.2
Ibm Security Access Manager For Web	Version 8.0.1.3
Ibm Security Access Manager For Web	Version 8.0.1.4
Ibm Security Access Manager For Web	Version 8.0.1.5
Ibm Security Access Manager For Web	Version 8.0.1.6
Ibm Security Access Manager For Web	Version 8.0

Configuration F

16 vulnerable

Vulnerable Software	Affected Versions
Ibm Security Access Manager For Mobile	Version 8.0.0.0
Ibm Security Access Manager For Mobile	Version 8.0.0.1
Ibm Security Access Manager For Mobile	Version 8.0.0.22
Ibm Security Access Manager For Mobile	Version 8.0.0.2
Ibm Security Access Manager For Mobile	Version 8.0.0.31
Ibm Security Access Manager For Mobile	Version 8.0.0.3
Ibm Security Access Manager For Mobile	Version 8.0.0.4
Ibm Security Access Manager For Mobile	Version 8.0.0.5
Ibm Security Access Manager For Mobile	Version 8.0.1.0
Ibm Security Access Manager For Mobile	Version 8.0.1.1
Ibm Security Access Manager For Mobile	Version 8.0.1.2
Ibm Security Access Manager For Mobile	Version 8.0.1.3
Ibm Security Access Manager For Mobile	Version 8.0.1.4
Ibm Security Access Manager For Mobile	Version 8.0.1.5
Ibm Security Access Manager For Mobile	Version 8.0.1.6
Ibm Security Access Manager For Mobile	Version 8.0

Configuration G

7 vulnerable

Vulnerable Software	Affected Versions
Ibm Security Access Manager	Version 9.0.0.0
Ibm Security Access Manager	Version 9.0.0.1
Ibm Security Access Manager	Version 9.0.1.0
Ibm Security Access Manager	Version 9.0.2.0
Ibm Security Access Manager	Version 9.0.2.1
Ibm Security Access Manager	Version 9.0.3.0
Ibm Security Access Manager	Version 9.0.3.0 if1