CVE-2014-4823 The administration console in IBM Security Access Manager for Web 7.x before 7.0.0-ISS-WGA-IF0009 and 8.x before 8.0.0-ISS-WGA-FP0005, and Security Access Manager for Mobile 8.x before 8.0.0-ISS-ISAM-...
HighCVSS 10.0
EPSS 2.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The administration console in IBM Security Access Manager for Web 7.x before 7.0.0-ISS-WGA-IF0009 and 8.x before 8.0.0-ISS-WGA-FP0005, and Security Access Manager for Mobile 8.x before 8.0.0-ISS-ISAM-FP0005, allows remote attackers to inject system commands via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm security access manager for web 7.0 firmware | = 7.0.0.0 | No fix listed |
| ibm security access manager for web 7.0 firmware | = 7.0.0.1 | No fix listed |
| ibm security access manager for web 7.0 firmware | = 7.0.0.2 | No fix listed |
| ibm security access manager for web 7.0 firmware | = 7.0.0.3 | No fix listed |
| ibm security access manager for web 7.0 firmware | = 7.0.0.4 | No fix listed |
| ibm security access manager for web 7.0 firmware | = 7.0.0.5 | No fix listed |
| ibm security access manager for web 7.0 firmware | = 7.0.0.6 | No fix listed |
| ibm security access manager for web 7.0 firmware | = 7.0.0.7 | No fix listed |
| ibm security access manager for web 7.0 firmware | = 7.0.0.8 | No fix listed |
| ibm security access manager for web appliance | = 7.0 | No fix listed |
| ibm security access manager for web appliance | = 8.0 | No fix listed |
| ibm security access manager for web 8.0 firmware | = 8.0.0.2 | No fix listed |
| ibm security access manager for web 8.0 firmware | = 8.0.0.3 | No fix listed |
| ibm security access manager for web 8.0 firmware | = 8.0.0.4 | No fix listed |
| ibm security access manager for mobile 8.0 firmware | = 8.0.0.0 | No fix listed |
| ibm security access manager for mobile 8.0 firmware | = 8.0.0.1 | No fix listed |
| ibm security access manager for mobile 8.0 firmware | = 8.0.0.3 | No fix listed |
| ibm security access manager for mobile 8.0 firmware | = 8.0.0.4 | No fix listed |
| ibm security access manager for mobile appliance | = 8.0 | No fix listed |
References
- 61278 third-party-advisory
- 61294 third-party-advisory
- IV64910 vendor-advisory
- IV64919 vendor-advisory
- www-01.ibm.com patch vendor-advisory
- ibm-sam-cve20144823-command-injection(95573) vdb-entry