IBM Security Access Manager Appliance 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 stores potentially sensitive information in log files that could be read by a remote user. IBM X-Force ID: 128617.
Weakness
The product writes sensitive information to a log file.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Security_access_manager | Ibm | 9.0.0 (including) | 9.0.3.1 (including) |
Potential Mitigations
Related Attack Patterns
References
- http://www.ibm.com/support/docview.wss?uid=swg22012309
- http://www.securityfocus.com/bid/104471
- https://exchange.xforce.ibmcloud.com/vulnerabilities/128617
- http://www.ibm.com/support/docview.wss?uid=swg22012309
- http://www.securityfocus.com/bid/104471
- https://exchange.xforce.ibmcloud.com/vulnerabilities/128617