CVEvulnerability

CVE-2017-1489

6.1 MEDIUM Published 2017-08-29 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-08-29
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
6.1 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS 2.0 ([email protected])
5.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:N
Weaknesses
CWE-601

Description

IBM Security Access Manager 6.1, 7.0, 8.0, and 9.0 e-community configurations may be affected by a redirect vulnerability. ECSSO Master Authentication can redirect to a server not participating in an e-community domain. IBM X-Force ID: 128687.

Affected configurations

• ibm tivoli access manager for e-business 6.1.0 • ibm tivoli access manager for e-business 6.1.0.1 • ibm tivoli access manager for e-business 6.1.0.2 • ibm tivoli access manager for e-business 6.1.0.3 • ibm tivoli access manager for e-business 6.1.0.4 • ibm tivoli access manager for e-business 6.1.0.5 • ibm tivoli access manager for e-business 6.1.0.6 • ibm tivoli access manager for e-business 6.1.0.7 • ibm tivoli access manager for e-business 6.1.0.8 • ibm tivoli access manager for e-business 6.1.0.9 • ibm tivoli access manager for e-business 6.1.0.10 • ibm tivoli access manager for e-business 6.1.0.11 • ibm tivoli access manager for e-business 6.1.0.12 • ibm tivoli access manager for e-business 6.1.0.13 • ibm tivoli access manager for e-business 6.1.0.14 • ibm tivoli access manager for e-business 6.1.0.15 • ibm tivoli access manager for e-business 6.1.0.16 • ibm tivoli access manager for e-business 6.1.0.17 • ibm tivoli access manager for e-business 6.1.0.18 • ibm tivoli access manager for e-business 6.1.0.19 • ibm tivoli access manager for e-business 6.1.0.20 • ibm tivoli access manager for e-business 6.1.0.21 • ibm tivoli access manager for e-business 6.1.0.22 • ibm tivoli access manager for e-business 6.1.0.23 • ibm tivoli access manager for e-business 6.1.0.24 • ibm tivoli access manager for e-business 6.1.0.25 • ibm tivoli access manager for e-business 6.1.0.26 • ibm tivoli access manager for e-business 6.1.0.27 • ibm tivoli access manager for e-business 6.1.0.28 • ibm tivoli access manager for e-business 6.1.0.29 • ibm tivoli access manager for e-business 6.1.0.30 • ibm tivoli access manager for e-business 6.1.0.31 • ibm tivoli access manager for e-business 6.1.1 • ibm tivoli access manager for e-business 6.1.1.1 • ibm tivoli access manager for e-business 6.1.1.2 • ibm tivoli access manager for e-business 6.1.1.3 • ibm tivoli access manager for e-business 6.1.1.4 • ibm tivoli access manager for e-business 6.1.1.5 • ibm tivoli access manager for e-business 6.1.1.6 • ibm tivoli access manager for e-business 6.1.1.7 • ibm tivoli access manager for e-business 6.1.1.8 • ibm tivoli access manager for e-business 6.1.1.9 • ibm tivoli access manager for e-business 6.1.1.10 • ibm tivoli access manager for e-business 6.1.1.11 • ibm tivoli access manager for e-business 6.1.1.12 • ibm tivoli access manager for e-business 6.1.1.13 • ibm tivoli access manager for e-business 6.1.1.14 • ibm tivoli access manager for e-business 6.1.1.15 • ibm tivoli access manager for e-business 6.1.1.16 • ibm tivoli access manager for e-business 6.1.1.17 • ibm tivoli access manager for e-business 6.1.1.18 • ibm tivoli access manager for e-business 6.1.1.19 • ibm tivoli access manager for e-business 6.1.1.20 • ibm tivoli access manager for e-business 6.1.1.21 • ibm tivoli access manager for e-business 6.1.1.22 • ibm tivoli access manager for e-business 6.1.1.23 • ibm tivoli access manager for e-business 6.1.1.24 • ibm tivoli access manager for e-business 6.1.1.25 • ibm tivoli access manager for e-business 6.1.1.26 • ibm tivoli access manager for e-business 6.1.1.27 … and 103 more

Related

Weakness · CWE (1)

  • CWE-601 URL Redirection to Untrusted Site weakness

References