PT-2017-13705
CVE-2017-1483
·
Published
2017-09-27
·
Updated
2017-10-06
Description by
CVSS 3.1
8.6
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Name of the Vulnerable Software and Affected Versions
IBM Security Identity Manager Adapters versions 6.0 through 7.0
Description
The issue allows anonymous users to access protected areas due to a lack of authentication check for a critical resource or functionality.
Recommendations
For IBM Security Identity Manager Adapters versions 6.0 through 7.0, consider implementing additional authentication checks to restrict access to protected areas until a patch is available. As a temporary workaround, restrict access to critical resources or functionalities to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾