What’s Vulnerable › Vulnerabilities
CVE-2017-1489
- Severity: medium (CVSS 6.1 v3.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2017-08-29 · updated 2026-06-17
- Weakness: CWE-601
Description
IBM Security Access Manager 6.1, 7.0, 8.0, and 9.0 e-community configurations may be affected by a redirect vulnerability. ECSSO Master Authentication can redirect to a server not participating in an e-community domain. IBM X-Force ID: 128687.
Affected products
- IBM Security Access Manager: 9.0.0.0, 9.0.0.1, 9.0.1.0, 9.0.2.0, 9.0.2.1, 9.0.3.0 (+1)
- IBM Security Access Manager For Mobile: 8.0, 8.0.0.0, 8.0.0.1, 8.0.0.2, 8.0.0.3, 8.0.0.4 (+10)
- IBM Security Access Manager for Web: 8.0, 8.0.0.0, 8.0.0.1, 8.0.0.2, 8.0.0.3, 8.0.0.4 (+10)
- IBM Security Access Manager For Web Appliance: 7.0, 7.0.0.1, 7.0.0.2, 7.0.0.3, 7.0.0.4, 7.0.0.5 (+25)
- IBM Security Access Manager For Web Software: 7.0, 7.0.0.1, 7.0.0.2, 7.0.0.3, 7.0.0.4, 7.0.0.5 (+25)
- IBM Tivoli Access Manager For E-Business: 6.1.0, 6.1.0.1, 6.1.0.2, 6.1.0.3, 6.1.0.4, 6.1.0.5 (+57)
References
- http://www.ibm.com/support/docview.wss?uid=swg22006959
- http://www.securityfocus.com/bid/100592
- http://www.securitytracker.com/id/1039227
- https://exchange.xforce.ibmcloud.com/vulnerabilities/128687
- http://www.ibm.com/support/docview.wss?uid=swg22006959
- http://www.securityfocus.com/bid/100592
- http://www.securitytracker.com/id/1039227
- https://exchange.xforce.ibmcloud.com/vulnerabilities/128687
Get alerted when CVE-2017-1489 or the next vulnerability affects your stack