CVE-2017-1534 is a vulnerability in IBM Security Access Manager
Published on January 10, 2018
IBM Security Access Manager Appliance 8.0.0 and 9.0.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 130676.
Products Associated with CVE-2017-1534
You can be notified by email with stack.watch whenever vulnerabilities like CVE-2017-1534 are published in IBM Security Access Manager:
Affected Versions
IBM Security Access Manager:- Version 9.0.0.1 is affected.
- Version 8.0.0 is affected.
- Version 8.0.0.1 is affected.
- Version 8.0.0.2 is affected.
- Version 8.0.0.3 is affected.
- Version 8.0.0.4 is affected.
- Version 8.0.0.5 is affected.
- Version 8.0.1 is affected.
- Version 8.0.1.2 is affected.
- Version 8.0.1.3 is affected.
- Version 8.0.1.4 is affected.
- Version 9.0.0 is affected.
- Version 9.0.1.0 is affected.
- Version 9.0.2.0 is affected.
- Version 8.0.1.5 is affected.
- Version 9.0.2.1 is affected.
- Version 9.0.3 is affected.
- Version 8.0.1.6 is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.