{"id":"CVE-2017-1474","state":"PUBLISHED","title":"IBM Security Access Manager Appliance 7.0.0, 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 discloses sensitive information to unauthorized users. The information can be used to ","description":"IBM Security Access Manager Appliance 7.0.0, 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 128606.","publishedAt":"2018-06-06T17:00:00.000Z","updatedAt":"2024-09-17T01:06:25.459Z","severity":{"score":5.3,"label":"Medium","version":"3.0","vector":"CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O","source":"ibm"},"assigner":"ibm","products":["IBM Security Access Manager"],"affected":[{"vendor":"IBM","product":"Security Access Manager","versions":[{"version":"9.0.0.1","status":"affected"},{"version":"7.0.0","status":"affected"},{"version":"8.0.0","status":"affected"},{"version":"8.0.0.1","status":"affected"},{"version":"8.0.0.2","status":"affected"},{"version":"8.0.0.3","status":"affected"},{"version":"8.0.0.4","status":"affected"},{"version":"8.0.0.5","status":"affected"},{"version":"8.0.1","status":"affected"},{"version":"8.0.1.2","status":"affected"},{"version":"8.0.1.3","status":"affected"},{"version":"8.0.1.4","status":"affected"},{"version":"9.0.0","status":"affected"},{"version":"9.0.1.0","status":"affected"},{"version":"9.0.2.0","status":"affected"},{"version":"8.0.1.5","status":"affected"},{"version":"9.0.2.1","status":"affected"},{"version":"9.0.3","status":"affected"},{"version":"9.0.3.1","status":"affected"},{"version":"8.0.1.6","status":"affected"}]}],"references":["https://exchange.xforce.ibmcloud.com/vulnerabilities/128606","http://www.ibm.com/support/docview.wss?uid=swg22012329","http://www.securityfocus.com/bid/104476"],"weaknesses":[],"ingestedAt":"2026-10-29T19:43:33.892Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2017/1xxx/CVE-2017-1474.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2017-1474","state":"PUBLISHED","datePublished":"2018-06-06T17:00:00.000Z","dateUpdated":"2024-09-17T01:06:25.459Z","assignerShortName":"ibm","assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateReserved":"2016-11-30T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"IBM Security Access Manager Appliance 7.0.0, 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 128606."}],"affected":[{"vendor":"IBM","product":"Security Access Manager","versions":[{"version":"9.0.0.1","status":"affected"},{"version":"7.0.0","status":"affected"},{"version":"8.0.0","status":"affected"},{"version":"8.0.0.1","status":"affected"},{"version":"8.0.0.2","status":"affected"},{"version":"8.0.0.3","status":"affected"},{"version":"8.0.0.4","status":"affected"},{"version":"8.0.0.5","status":"affected"},{"version":"8.0.1","status":"affected"},{"version":"8.0.1.2","status":"affected"},{"version":"8.0.1.3","status":"affected"},{"version":"8.0.1.4","status":"affected"},{"version":"9.0.0","status":"affected"},{"version":"9.0.1.0","status":"affected"},{"version":"9.0.2.0","status":"affected"},{"version":"8.0.1.5","status":"affected"},{"version":"9.0.2.1","status":"affected"},{"version":"9.0.3","status":"affected"},{"version":"9.0.3.1","status":"affected"},{"version":"8.0.1.6","status":"affected"}]}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/128606","name":"ibm-sam-cve20171474-info-disc(128606)","tags":["vdb-entry","x_refsource_XF"]},{"url":"http://www.ibm.com/support/docview.wss?uid=swg22012329","tags":["x_refsource_CONFIRM"]},{"url":"http://www.securityfocus.com/bid/104476","name":"104476","tags":["vdb-entry","x_refsource_BID"]}],"metrics":[{"cvssV3_0":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","exploitCodeMaturity":"UNPROVEN","integrityImpact":"NONE","privilegesRequired":"NONE","remediationLevel":"OFFICIAL_FIX","reportConfidence":"CONFIRMED","scope":"UNCHANGED","temporalScore":4.6,"temporalSeverity":"MEDIUM","userInteraction":"NONE","vectorString":"CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O","version":"3.0"}}],"problemTypes":[{"descriptions":[{"description":"Obtain Information","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"ibm","dateUpdated":"2018-06-18T09:57:01.000Z","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522"},"datePublic":"2018-06-04T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@us.ibm.com","DATE_PUBLIC":"2018-06-04T00:00:00","ID":"CVE-2017-1474","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Security Access Manager","version":{"version_data":[{"version_value":"9.0.0.1"},{"version_value":"7.0.0"},{"version_value":"8.0.0"},{"version_value":"8.0.0.1"},{"version_value":"8.0.0.2"},{"version_value":"8.0.0.3"},{"version_value":"8.0.0.4"},{"version_value":"8.0.0.5"},{"version_value":"8.0.1"},{"version_value":"8.0.1.2"},{"version_value":"8.0.1.3"},{"version_value":"8.0.1.4"},{"version_value":"9.0.0"},{"version_value":"9.0.1.0"},{"version_value":"9.0.2.0"},{"version_value":"8.0.1.5"},{"version_value":"9.0.2.1"},{"version_value":"9.0.3"},{"version_value":"9.0.3.1"},{"version_value":"8.0.1.6"}]}}]},"vendor_name":"IBM"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"IBM Security Access Manager Appliance 7.0.0, 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 128606."}]},"impact":{"cvssv3":{"BM":{"A":"N","AC":"L","AV":"N","C":"L","I":"N","PR":"N","S":"U","UI":"N"},"TM":{"E":"U","RC":"C","RL":"O"}}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Obtain Information"}]}]},"references":{"reference_data":[{"name":"ibm-sam-cve20171474-info-disc(128606)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/128606"},{"name":"http://www.ibm.com/support/docview.wss?uid=swg22012329","refsource":"CONFIRM","url":"http://www.ibm.com/support/docview.wss?uid=swg22012329"},{"name":"104476","refsource":"BID","url":"http://www.securityfocus.com/bid/104476"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/128606","name":"ibm-sam-cve20171474-info-disc(128606)","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.ibm.com/support/docview.wss?uid=swg22012329","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.securityfocus.com/bid/104476","name":"104476","tags":["vdb-entry","x_refsource_BID","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-05T13:32:29.829Z"}}]}}}