Vulnerability in Ibm Security Access Manager
CVE-2019-4153
IBM Security Access Manager 9.0.1 through 9.0.6 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vu…
EPSS: 0.001 (25.8th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.8 (Medium). Vector: CVSS:3.0/S:C/AV:N/C:N/I:H/AC:L/UI:R/PR:L/A:N/E:U/RC:C/RL:O.
Affected products
- Ibm Security Access Manager — versions 9.0.1, 9.0.3, 9.0.4
References
- www.ibm.com/support/docview.wss (x_refsource_CONFIRM)
- ibm-sam-cve20194153-open-redirect (158517) (vdb-entry, x_refsource_XF)
Frequently asked questions
- What is CVE-2019-4153?
- CVE-2019-4153 is a medium-severity vulnerability in Ibm Security Access Manager. CVSS score: 6.8/10. Published 2019-06-25.
- How severe is CVE-2019-4153?
- Medium severity. CVSS v3 base score is 6.8 out of 10.