PT-2018-14704

CVE-2018-1887

·

Published

2018-12-13

·

Updated

2019-10-09

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions IBM Security Access Manager Appliance versions 9.0.1.0 through 9.0.5.0
Description The issue concerns hard-coded credentials, such as a password or cryptographic key, used for inbound authentication, outbound communication to external components, or encryption of internal data.
Recommendations For versions 9.0.1.0 through 9.0.5.0, consider changing the hard-coded credentials to unique, secure values to prevent unauthorized access. As a temporary workaround, restrict access to the appliance until the credentials can be updated.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾