Vulnerability Bulletins |
IBM Security Bulletin: IBM Security Access Manager for Web is affected by a command injection vulnerability (CVE-2015-5018) |
|
| Affected software | IBM |
|
IBM Security Access Manager for Web allows attackers to run arbitrary commands on the Operating System of the appliance. An attacker with access to the LMI could use a command injection attack to gain elevated access to the appliance. CVE(s): CVE-2015-5018 Affected product(s) and affected version(s): IBM Security Access Manager for Web 7.0 appliances, all firmware versions IBM Security Access Manager for Web 8.0 appliances, all firmware versions IBM Security Access Manager 9.0 More info: https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_ibm_security_access_manager_for_web_is_affected_by_a_command_injection_vulnerability_cve_2015_5018?lang=en_us |
|