CVE-2019-4153 IBM Security Access Manager 9.0.1 through 9.0.6 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site,....
MediumCVSS 6.8
EPSS 0.99%
- Published
- Updated
- Exploit status
- No public exploit known
Description
IBM Security Access Manager 9.0.1 through 9.0.6 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 158517.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm security access manager | >= 9.0.1, <= 9.0.6 | No fix listed |
| ibm security access manager | = 9.0.1 | No fix listed |
| ibm security access manager | = 9.0.3 | No fix listed |
| ibm security access manager | = 9.0.4 | No fix listed |
| ibm security access manager | = 9.0.2 | No fix listed |
| ibm security access manager | = 9.0.5 | No fix listed |
| ibm security access manager | = 9.0.6 | No fix listed |
References
- ibm-sam-cve20194153-open-redirect (158517) vdb-entry vendor-advisory
- www.ibm.com patch vendor-advisory