Vulnerability Description
The IBM Security Access Manager appliance includes configuration files that contain obfuscated plaintext-passwords which authenticated users can access.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Security Access Manager For Web 8.0 Firmware | All versions |
| Ibm | Security Access Manager For Web Appliance | 8.0 |
| Ibm | Security Access Manager For Mobile | All versions |
| Ibm | Security Access Manager For Mobile Appliance | 8.0 |
| Ibm | Security Access Manager 9.0 Firmware | All versions |
| Ibm | Security Access Manager 9.0 | - |
Related Weaknesses (CWE)
References
- http://www.ibm.com/support/docview.wss?uid=swg21993722PatchVendor Advisory
- http://www.securityfocus.com/bid/96090Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1037792Third Party AdvisoryVDB Entry
- http://www.ibm.com/support/docview.wss?uid=swg21993722PatchVendor Advisory
- http://www.securityfocus.com/bid/96090Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1037792Third Party AdvisoryVDB Entry
FAQ
What is CVE-2015-5013?
CVE-2015-5013 is a vulnerability with a CVSS score of 5.5 (MEDIUM). The IBM Security Access Manager appliance includes configuration files that contain obfuscated plaintext-passwords which authenticated users can access.
How severe is CVE-2015-5013?
CVE-2015-5013 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2015-5013?
Check the references section above for vendor advisories and patch information. Affected products include: Ibm Security Access Manager For Web 8.0 Firmware, Ibm Security Access Manager For Web Appliance, Ibm Security Access Manager For Mobile, Ibm Security Access Manager For Mobile Appliance, Ibm Security Access Manager 9.0 Firmware.