The IMS server before Ifix 6 in IBM Security Access Manager for Enterprise Single Sign-On (ISAM ESSO) 8.2 allows remote authenticated users to read log files by leveraging helpdesk privileges for a direct request.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Security_access_manager_for_enterprise_single_sign-on | Ibm | 8.2 (including) | 8.2 (including) |