Description
IBM Security Access Manager Appliance 8.0.0 and 9.0.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 130676.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
IBM Security Access Manager
9.0.0.1affected8.0.0affected8.0.0.1affected8.0.0.2affected8.0.0.3affected8.0.0.4affected8.0.0.5affected8.0.1affected8.0.1.2affected8.0.1.3affected8.0.1.4affected9.0.0affected9.0.1.0affected9.0.2.0affected8.0.1.5affected9.0.2.1affected9.0.3affected8.0.1.6affected