Description

IBM Security Access Manager Appliance 9.0.4.0 and 9.0.5.0 could allow remote code execution when Advanced Access Control or Federation services are running. IBM X-Force ID: 147370.

Remediation

References

CVE-2018-1722

Related Vulnerabilities

WordPress Plugin WooCommerce Address Book Cross-Site Request Forgery (1.5.6)

WordPress Plugin WP STAGING WordPress Backup-Migration Backup Restore Server-Side Request Forgery (3.4.3)

Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-4938)

WordPress Plugin jRSS Widget 'url' Parameter Directory Traversal (1.1.1)

Jboss EAP Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2019-9518)

Severity

Critical

Classification

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities CVE-2018-1722