fkie_cve-2017-1489
Vulnerability from fkie_nvd
Published
2017-08-29 01:35
Modified
2024-11-21 03:21
Summary
IBM Security Access Manager 6.1, 7.0, 8.0, and 9.0 e-community configurations may be affected by a redirect vulnerability. ECSSO Master Authentication can redirect to a server not participating in an e-community domain. IBM X-Force ID: 128687.
Impacted products
Vendor Product Version
ibm tivoli_access_manager_for_e-business 6.1.0
ibm tivoli_access_manager_for_e-business 6.1.0.1
ibm tivoli_access_manager_for_e-business 6.1.0.2
ibm tivoli_access_manager_for_e-business 6.1.0.3
ibm tivoli_access_manager_for_e-business 6.1.0.4
ibm tivoli_access_manager_for_e-business 6.1.0.5
ibm tivoli_access_manager_for_e-business 6.1.0.6
ibm tivoli_access_manager_for_e-business 6.1.0.7
ibm tivoli_access_manager_for_e-business 6.1.0.8
ibm tivoli_access_manager_for_e-business 6.1.0.9
ibm tivoli_access_manager_for_e-business 6.1.0.10
ibm tivoli_access_manager_for_e-business 6.1.0.11
ibm tivoli_access_manager_for_e-business 6.1.0.12
ibm tivoli_access_manager_for_e-business 6.1.0.13
ibm tivoli_access_manager_for_e-business 6.1.0.14
ibm tivoli_access_manager_for_e-business 6.1.0.15
ibm tivoli_access_manager_for_e-business 6.1.0.16
ibm tivoli_access_manager_for_e-business 6.1.0.17
ibm tivoli_access_manager_for_e-business 6.1.0.18
ibm tivoli_access_manager_for_e-business 6.1.0.19
ibm tivoli_access_manager_for_e-business 6.1.0.20
ibm tivoli_access_manager_for_e-business 6.1.0.21
ibm tivoli_access_manager_for_e-business 6.1.0.22
ibm tivoli_access_manager_for_e-business 6.1.0.23
ibm tivoli_access_manager_for_e-business 6.1.0.24
ibm tivoli_access_manager_for_e-business 6.1.0.25
ibm tivoli_access_manager_for_e-business 6.1.0.26
ibm tivoli_access_manager_for_e-business 6.1.0.27
ibm tivoli_access_manager_for_e-business 6.1.0.28
ibm tivoli_access_manager_for_e-business 6.1.0.29
ibm tivoli_access_manager_for_e-business 6.1.0.30
ibm tivoli_access_manager_for_e-business 6.1.0.31
ibm tivoli_access_manager_for_e-business 6.1.1
ibm tivoli_access_manager_for_e-business 6.1.1.1
ibm tivoli_access_manager_for_e-business 6.1.1.2
ibm tivoli_access_manager_for_e-business 6.1.1.3
ibm tivoli_access_manager_for_e-business 6.1.1.4
ibm tivoli_access_manager_for_e-business 6.1.1.5
ibm tivoli_access_manager_for_e-business 6.1.1.6
ibm tivoli_access_manager_for_e-business 6.1.1.7
ibm tivoli_access_manager_for_e-business 6.1.1.8
ibm tivoli_access_manager_for_e-business 6.1.1.9
ibm tivoli_access_manager_for_e-business 6.1.1.10
ibm tivoli_access_manager_for_e-business 6.1.1.11
ibm tivoli_access_manager_for_e-business 6.1.1.12
ibm tivoli_access_manager_for_e-business 6.1.1.13
ibm tivoli_access_manager_for_e-business 6.1.1.14
ibm tivoli_access_manager_for_e-business 6.1.1.15
ibm tivoli_access_manager_for_e-business 6.1.1.16
ibm tivoli_access_manager_for_e-business 6.1.1.17
ibm tivoli_access_manager_for_e-business 6.1.1.18
ibm tivoli_access_manager_for_e-business 6.1.1.19
ibm tivoli_access_manager_for_e-business 6.1.1.20
ibm tivoli_access_manager_for_e-business 6.1.1.21
ibm tivoli_access_manager_for_e-business 6.1.1.22
ibm tivoli_access_manager_for_e-business 6.1.1.23
ibm tivoli_access_manager_for_e-business 6.1.1.24
ibm tivoli_access_manager_for_e-business 6.1.1.25
ibm tivoli_access_manager_for_e-business 6.1.1.26
ibm tivoli_access_manager_for_e-business 6.1.1.27
ibm tivoli_access_manager_for_e-business 6.1.1.28
ibm tivoli_access_manager_for_e-business 6.1.1.29
ibm tivoli_access_manager_for_e-business 6.1.1.30
ibm security_access_manager_for_web_software 7.0
ibm security_access_manager_for_web_software 7.0.0.1
ibm security_access_manager_for_web_software 7.0.0.2
ibm security_access_manager_for_web_software 7.0.0.3
ibm security_access_manager_for_web_software 7.0.0.4
ibm security_access_manager_for_web_software 7.0.0.5
ibm security_access_manager_for_web_software 7.0.0.6
ibm security_access_manager_for_web_software 7.0.0.7
ibm security_access_manager_for_web_software 7.0.0.8
ibm security_access_manager_for_web_software 7.0.0.9
ibm security_access_manager_for_web_software 7.0.0.10
ibm security_access_manager_for_web_software 7.0.0.11
ibm security_access_manager_for_web_software 7.0.0.12
ibm security_access_manager_for_web_software 7.0.0.13
ibm security_access_manager_for_web_software 7.0.0.14
ibm security_access_manager_for_web_software 7.0.0.15
ibm security_access_manager_for_web_software 7.0.0.16
ibm security_access_manager_for_web_software 7.0.0.17
ibm security_access_manager_for_web_software 7.0.0.18
ibm security_access_manager_for_web_software 7.0.0.19
ibm security_access_manager_for_web_software 7.0.0.20
ibm security_access_manager_for_web_software 7.0.0.21
ibm security_access_manager_for_web_software 7.0.0.22
ibm security_access_manager_for_web_software 7.0.0.23
ibm security_access_manager_for_web_software 7.0.0.24
ibm security_access_manager_for_web_software 7.0.0.25
ibm security_access_manager_for_web_software 7.0.0.26
ibm security_access_manager_for_web_software 7.0.0.27
ibm security_access_manager_for_web_software 7.0.0.28
ibm security_access_manager_for_web_software 7.0.0.29
ibm security_access_manager_for_web_software 7.0.0.30
ibm security_access_manager_for_web_appliance 7.0
ibm security_access_manager_for_web_appliance 7.0.0.1
ibm security_access_manager_for_web_appliance 7.0.0.2
ibm security_access_manager_for_web_appliance 7.0.0.3
ibm security_access_manager_for_web_appliance 7.0.0.4
ibm security_access_manager_for_web_appliance 7.0.0.5
ibm security_access_manager_for_web_appliance 7.0.0.6
ibm security_access_manager_for_web_appliance 7.0.0.7
ibm security_access_manager_for_web_appliance 7.0.0.8
ibm security_access_manager_for_web_appliance 7.0.0.9
ibm security_access_manager_for_web_appliance 7.0.0.10
ibm security_access_manager_for_web_appliance 7.0.0.11
ibm security_access_manager_for_web_appliance 7.0.0.12
ibm security_access_manager_for_web_appliance 7.0.0.13
ibm security_access_manager_for_web_appliance 7.0.0.14
ibm security_access_manager_for_web_appliance 7.0.0.15
ibm security_access_manager_for_web_appliance 7.0.0.16
ibm security_access_manager_for_web_appliance 7.0.0.17
ibm security_access_manager_for_web_appliance 7.0.0.18
ibm security_access_manager_for_web_appliance 7.0.0.19
ibm security_access_manager_for_web_appliance 7.0.0.20
ibm security_access_manager_for_web_appliance 7.0.0.21
ibm security_access_manager_for_web_appliance 7.0.0.22
ibm security_access_manager_for_web_appliance 7.0.0.23
ibm security_access_manager_for_web_appliance 7.0.0.24
ibm security_access_manager_for_web_appliance 7.0.0.25
ibm security_access_manager_for_web_appliance 7.0.0.26
ibm security_access_manager_for_web_appliance 7.0.0.27
ibm security_access_manager_for_web_appliance 7.0.0.28
ibm security_access_manager_for_web_appliance 7.0.0.29
ibm security_access_manager_for_web_appliance 7.0.0.30
ibm security_access_manager_for_web 8.0
ibm security_access_manager_for_web 8.0.0.0
ibm security_access_manager_for_web 8.0.0.1
ibm security_access_manager_for_web 8.0.0.2
ibm security_access_manager_for_web 8.0.0.3
ibm security_access_manager_for_web 8.0.0.4
ibm security_access_manager_for_web 8.0.0.5
ibm security_access_manager_for_web 8.0.0.22
ibm security_access_manager_for_web 8.0.0.31
ibm security_access_manager_for_web 8.0.1.0
ibm security_access_manager_for_web 8.0.1.1
ibm security_access_manager_for_web 8.0.1.2
ibm security_access_manager_for_web 8.0.1.3
ibm security_access_manager_for_web 8.0.1.4
ibm security_access_manager_for_web 8.0.1.5
ibm security_access_manager_for_web 8.0.1.6
ibm security_access_manager_for_mobile 8.0
ibm security_access_manager_for_mobile 8.0.0.0
ibm security_access_manager_for_mobile 8.0.0.1
ibm security_access_manager_for_mobile 8.0.0.2
ibm security_access_manager_for_mobile 8.0.0.3
ibm security_access_manager_for_mobile 8.0.0.4
ibm security_access_manager_for_mobile 8.0.0.5
ibm security_access_manager_for_mobile 8.0.0.22
ibm security_access_manager_for_mobile 8.0.0.31
ibm security_access_manager_for_mobile 8.0.1.0
ibm security_access_manager_for_mobile 8.0.1.1
ibm security_access_manager_for_mobile 8.0.1.2
ibm security_access_manager_for_mobile 8.0.1.3
ibm security_access_manager_for_mobile 8.0.1.4
ibm security_access_manager_for_mobile 8.0.1.5
ibm security_access_manager_for_mobile 8.0.1.6
ibm security_access_manager 9.0.0.0
ibm security_access_manager 9.0.0.1
ibm security_access_manager 9.0.1.0
ibm security_access_manager 9.0.2.0
ibm security_access_manager 9.0.2.1
ibm security_access_manager 9.0.3.0
ibm security_access_manager 9.0.3.0



{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "7CAE25B3-55F6-4D93-9110-26323F5D6CF8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "BDB8C962-AAEA-4005-BC6B-7768310295E6",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "86E64D67-84B1-4B22-B68C-AAFA68149206",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "D3B0FD7F-8007-41F8-A0B3-0C11B9F6D2BA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.0.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "C7255EFB-AE47-45E9-853E-5242D350A04E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.0.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "26F1E4CC-0FE8-4D18-9507-74131B8F21E8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.0.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "624215F6-12DE-42B5-98AE-29F30C759690",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.0.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "B57D6417-ECB7-4A02-8C01-6E85087AD073",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.0.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "92FF03BE-E1FC-491A-BBA5-0C67B9EC0F1B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.0.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "9B9EFD7C-D827-4079-BBA5-38601F1DA571",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.0.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "C54E2A37-F451-4109-A367-A35D38D8E44C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.0.11:*:*:*:*:*:*:*",
              "matchCriteriaId": "24BBDD80-3EBA-4F5E-89BC-4107431B813F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.0.12:*:*:*:*:*:*:*",
              "matchCriteriaId": "2826D12C-893B-4045-98C0-60FDBB5EC252",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.0.13:*:*:*:*:*:*:*",
              "matchCriteriaId": "1678A4B5-E2BB-41A2-9238-D0D34B189D1D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.0.14:*:*:*:*:*:*:*",
              "matchCriteriaId": "B4412073-8390-46B3-94A6-20D7B8075838",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.0.15:*:*:*:*:*:*:*",
              "matchCriteriaId": "0E0AE0FD-6595-4132-8715-D2B859B04EB4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.0.16:*:*:*:*:*:*:*",
              "matchCriteriaId": "4256CF5F-8B99-4C5D-B67B-840DE56412EF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.0.17:*:*:*:*:*:*:*",
              "matchCriteriaId": "7CA0D2F3-31B5-4AF8-B6E0-6795A240F094",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.0.18:*:*:*:*:*:*:*",
              "matchCriteriaId": "37632E93-91AA-47A6-9EF7-EB5A6FC4B843",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.0.19:*:*:*:*:*:*:*",
              "matchCriteriaId": "937C104A-74B7-4FC4-B436-42C14C4E4339",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.0.20:*:*:*:*:*:*:*",
              "matchCriteriaId": "E4449E78-A1A2-423C-A9A4-5AB8ED7B1D3C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.0.21:*:*:*:*:*:*:*",
              "matchCriteriaId": "32B351D1-5DB8-4C6D-8CA8-C22E6DE66D21",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.0.22:*:*:*:*:*:*:*",
              "matchCriteriaId": "FC8671CD-4FEA-4408-B594-ED8B7BD8543F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.0.23:*:*:*:*:*:*:*",
              "matchCriteriaId": "CEB5C09B-0681-42A1-AF82-15E91CD94787",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.0.24:*:*:*:*:*:*:*",
              "matchCriteriaId": "1083BB5E-C153-46D1-8FEE-63AEB52B5546",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.0.25:*:*:*:*:*:*:*",
              "matchCriteriaId": "59231981-02BF-4998-A86F-BFF6B4B79CED",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.0.26:*:*:*:*:*:*:*",
              "matchCriteriaId": "E912624A-33B5-4AF5-96DB-292C14B0A37D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.0.27:*:*:*:*:*:*:*",
              "matchCriteriaId": "DB434802-50F4-4FCB-B674-C92FC5046140",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.0.28:*:*:*:*:*:*:*",
              "matchCriteriaId": "A0553613-6429-4202-B9F1-CB2F58412D82",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.0.29:*:*:*:*:*:*:*",
              "matchCriteriaId": "EC68FC7C-F67D-44C7-AAA7-ECD2DB27C286",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.0.30:*:*:*:*:*:*:*",
              "matchCriteriaId": "7F7D529E-724A-4AC6-91AA-9C771C980471",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.0.31:*:*:*:*:*:*:*",
              "matchCriteriaId": "12664D6B-1DF6-455E-99CB-08AF7A3C926E",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "8FDBFAE1-351E-4E9F-877E-E9BBB50FCFF8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "BE91D383-8FCF-4352-9DE4-306F99171785",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.1.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "318A64DE-04E9-4A55-85D7-1079EECD7175",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.1.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "8961882B-0715-4B61-8343-9225BDDBC9E1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.1.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "699C6485-0FA4-47EE-9081-0332D0B1F8AD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.1.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "6165F468-26EE-4AA7-B806-007F78AFD754",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.1.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "25C01EE0-7BE2-420C-B538-A15589D9A019",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.1.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "6DFB52D6-9F29-49C1-83CC-CE662253488B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.1.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "B4B247D8-4BEC-41BC-822E-5C31A8AECCAC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.1.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "8A32A31D-266C-47D9-B11D-3C2DAEF6A025",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.1.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "8D32BB3A-3404-4B3B-AEBF-BF40B0CDC426",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.1.11:*:*:*:*:*:*:*",
              "matchCriteriaId": "2958706F-D4E1-41C0-A341-2E045A110E68",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.1.12:*:*:*:*:*:*:*",
              "matchCriteriaId": "4E149CF2-75F4-43E8-9B1C-657D95403AA1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.1.13:*:*:*:*:*:*:*",
              "matchCriteriaId": "FE300627-1032-405E-96CC-B8CDF03C2326",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.1.14:*:*:*:*:*:*:*",
              "matchCriteriaId": "745799EB-8664-40D6-907B-9B8F640860E5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.1.15:*:*:*:*:*:*:*",
              "matchCriteriaId": "097C64C6-9C0E-463A-8EEB-2906D9131887",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.1.16:*:*:*:*:*:*:*",
              "matchCriteriaId": "CEF8D79D-0859-4943-A3A9-0C2F4183A9B1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.1.17:*:*:*:*:*:*:*",
              "matchCriteriaId": "8F491FA5-27ED-454B-850E-76DF60960D69",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.1.18:*:*:*:*:*:*:*",
              "matchCriteriaId": "24610D16-7235-4EE2-AF20-AAAFCDF749D0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.1.19:*:*:*:*:*:*:*",
              "matchCriteriaId": "DB4406DA-9DC1-4F76-9D2B-BE5BD8FB31F1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.1.20:*:*:*:*:*:*:*",
              "matchCriteriaId": "AC7E8F5B-743B-4778-B096-1A2F950A31BA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.1.21:*:*:*:*:*:*:*",
              "matchCriteriaId": "3930684E-FA31-42CB-8750-097ABEBE643B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.1.22:*:*:*:*:*:*:*",
              "matchCriteriaId": "7B733C54-4DDA-4491-A6A0-F07D7D879900",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.1.23:*:*:*:*:*:*:*",
              "matchCriteriaId": "3F34676D-8537-4C7A-9C25-EF6973C0AD81",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.1.24:*:*:*:*:*:*:*",
              "matchCriteriaId": "1A8CB2D8-D1EC-429B-8C8B-48AF082C5FD2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.1.25:*:*:*:*:*:*:*",
              "matchCriteriaId": "C3B0FF96-BF36-40A7-99B5-9904785D4A7B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.1.26:*:*:*:*:*:*:*",
              "matchCriteriaId": "E08CB452-3475-4143-AD28-550E130A33B4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.1.27:*:*:*:*:*:*:*",
              "matchCriteriaId": "4D86E921-FF6A-4045-B853-0D6F86BF2475",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.1.28:*:*:*:*:*:*:*",
              "matchCriteriaId": "B582DA4C-9457-4EDD-A47B-66DB213198AB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.1.29:*:*:*:*:*:*:*",
              "matchCriteriaId": "575D7BEE-0DB2-435D-844E-387590EF087A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:6.1.1.30:*:*:*:*:*:*:*",
              "matchCriteriaId": "4D9BAD4E-9F38-4AB7-A566-834A97CD1A86",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web_software:7.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "BACDCBD6-EEF3-4259-9866-A89105AA4C19",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web_software:7.0.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "536755AC-3FA7-4FA4-8CA3-0E1D4CB0FB43",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web_software:7.0.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "68DB06C6-84B3-4DC6-AEE9-9DA49715A3BF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web_software:7.0.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "B894B409-DC42-4FA4-8864-387635B55F12",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web_software:7.0.0.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "B52B9A91-EDAF-43CC-A271-02ADCD691875",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web_software:7.0.0.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "3F740591-A399-49AC-911B-9ADD117B5BEB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web_software:7.0.0.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "A4EB9A2D-0ABF-46C3-A742-959CC39070DC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web_software:7.0.0.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "4B832D0A-923B-4F4B-9F81-BA1BA2E7A920",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web_software:7.0.0.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "F4EA2E35-08D1-4A2F-8941-0C87DF1BFC2C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web_software:7.0.0.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "A953FA93-A982-4104-8D6A-685E53613691",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web_software:7.0.0.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "BE0028F4-5A36-4597-9830-46CFE5CF2EE5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web_software:7.0.0.11:*:*:*:*:*:*:*",
              "matchCriteriaId": "FE607CA8-FB8A-4373-A345-822D5ABEA408",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web_software:7.0.0.12:*:*:*:*:*:*:*",
              "matchCriteriaId": "0CB32198-9382-43CC-9079-08D2162B4C79",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web_software:7.0.0.13:*:*:*:*:*:*:*",
              "matchCriteriaId": "4336D4DD-5DE4-441E-B852-A2E1409953CC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web_software:7.0.0.14:*:*:*:*:*:*:*",
              "matchCriteriaId": "FDCBBC83-DCE2-4522-9808-8EFA63485388",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web_software:7.0.0.15:*:*:*:*:*:*:*",
              "matchCriteriaId": "66159D17-FAB8-408A-90FA-62E9F840B568",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web_software:7.0.0.16:*:*:*:*:*:*:*",
              "matchCriteriaId": "0D79656C-0F25-4647-BE54-AAF0336C7BB5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web_software:7.0.0.17:*:*:*:*:*:*:*",
              "matchCriteriaId": "940F82D3-5809-42DC-92B5-F699C34F6996",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web_software:7.0.0.18:*:*:*:*:*:*:*",
              "matchCriteriaId": "6994DE96-2967-4C7C-A896-B68E064C41C3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web_software:7.0.0.19:*:*:*:*:*:*:*",
              "matchCriteriaId": "55734E7A-D2CA-490F-8BAC-F47CE1A2F3FB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web_software:7.0.0.20:*:*:*:*:*:*:*",
              "matchCriteriaId": "E9047D70-83D3-4D45-8A16-4299A0D06D17",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web_software:7.0.0.21:*:*:*:*:*:*:*",
              "matchCriteriaId": "65F66744-ABFA-4EB1-ACFB-FF88E0F20BBA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web_software:7.0.0.22:*:*:*:*:*:*:*",
              "matchCriteriaId": "33C28A38-46FA-4878-9F03-D9ACB510ED88",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web_software:7.0.0.23:*:*:*:*:*:*:*",
              "matchCriteriaId": "9D2EC653-CE7B-45A2-AB9F-F760646A4682",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web_software:7.0.0.24:*:*:*:*:*:*:*",
              "matchCriteriaId": "94EF01E4-FBF5-4AF5-A6E8-BECF6052F72F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web_software:7.0.0.25:*:*:*:*:*:*:*",
              "matchCriteriaId": "2F0E063D-2C5E-4619-9176-9D28716BEDC8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web_software:7.0.0.26:*:*:*:*:*:*:*",
              "matchCriteriaId": "CC30B443-ACDB-4D10-88F2-07DAF8684C04",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web_software:7.0.0.27:*:*:*:*:*:*:*",
              "matchCriteriaId": "E843FD37-844C-4359-9465-30C95B5F0831",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web_software:7.0.0.28:*:*:*:*:*:*:*",
              "matchCriteriaId": "5FE19EBF-68CA-4075-9A6D-B3DB7FF5DB6D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web_software:7.0.0.29:*:*:*:*:*:*:*",
              "matchCriteriaId": "D424803C-85C3-4860-B842-93B98554070D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web_software:7.0.0.30:*:*:*:*:*:*:*",
              "matchCriteriaId": "DC489116-D486-4388-8E93-E6E98EA81868",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web_appliance:7.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "53A3B2B3-52B4-4086-9092-364649265F5E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web_appliance:7.0.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "E24ACD0C-D825-4B2B-9483-66F0B815CB24",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web_appliance:7.0.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "2CD382BC-2AA1-448E-BC8E-CAB2408995BA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web_appliance:7.0.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "23A074B8-A709-44F1-9CB9-7BF2590989C9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web_appliance:7.0.0.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "3F73936C-442D-4857-99B3-605E55D82833",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web_appliance:7.0.0.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "54243412-CB97-4752-A31A-3CB6A757E495",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web_appliance:7.0.0.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "BD9CF344-C187-4D60-8C90-2FB459883D6E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web_appliance:7.0.0.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "97AF8910-3F9A-407F-9834-B57D5807693D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web_appliance:7.0.0.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "DFB1BA86-C809-414E-8F58-2B6101518FB2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web_appliance:7.0.0.9:*:*:*:*:*:*:*",
              "matchCriteriaId": "DC1634D4-28AB-4F12-B5FB-D32742F5836B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web_appliance:7.0.0.10:*:*:*:*:*:*:*",
              "matchCriteriaId": "1EA35BD4-8738-47D3-A8F0-F9ABE4AEB985",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web_appliance:7.0.0.11:*:*:*:*:*:*:*",
              "matchCriteriaId": "344FE134-DE7B-4925-875E-097DD0AB9AC9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web_appliance:7.0.0.12:*:*:*:*:*:*:*",
              "matchCriteriaId": "674FFA61-8F2A-43FB-BF51-68700698703C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web_appliance:7.0.0.13:*:*:*:*:*:*:*",
              "matchCriteriaId": "332D3784-C24E-45A7-880B-0C4A32687B69",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web_appliance:7.0.0.14:*:*:*:*:*:*:*",
              "matchCriteriaId": "CF0738FC-EAC8-45C4-ADA9-06DBE3D9EADF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web_appliance:7.0.0.15:*:*:*:*:*:*:*",
              "matchCriteriaId": "837D32E7-CFB7-462B-8479-E9811C149775",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web_appliance:7.0.0.16:*:*:*:*:*:*:*",
              "matchCriteriaId": "A7BE362F-72B3-481A-ABF4-4A36F4535F55",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web_appliance:7.0.0.17:*:*:*:*:*:*:*",
              "matchCriteriaId": "C73DE810-1D11-4480-AF62-DC37F22DCC71",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web_appliance:7.0.0.18:*:*:*:*:*:*:*",
              "matchCriteriaId": "31D161F8-D61A-40DF-AA14-5256DD394082",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web_appliance:7.0.0.19:*:*:*:*:*:*:*",
              "matchCriteriaId": "154B6E05-54C8-4271-A904-21CA6A2E6F6D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web_appliance:7.0.0.20:*:*:*:*:*:*:*",
              "matchCriteriaId": "6389F03A-3547-44B1-9603-947735FC31B2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web_appliance:7.0.0.21:*:*:*:*:*:*:*",
              "matchCriteriaId": "E2735E77-B9ED-4608-AFA5-969E039C82F5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web_appliance:7.0.0.22:*:*:*:*:*:*:*",
              "matchCriteriaId": "0C58102A-8817-4656-AB85-07D60CB2D10F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web_appliance:7.0.0.23:*:*:*:*:*:*:*",
              "matchCriteriaId": "461046D0-29C2-4152-B4D2-C60E9A04EE07",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web_appliance:7.0.0.24:*:*:*:*:*:*:*",
              "matchCriteriaId": "99EB7777-7CA5-41CB-98BC-AFC254E02C6F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web_appliance:7.0.0.25:*:*:*:*:*:*:*",
              "matchCriteriaId": "0CFFABA7-86BD-4201-89F9-0F61E673DB90",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web_appliance:7.0.0.26:*:*:*:*:*:*:*",
              "matchCriteriaId": "F472F171-9FF2-4C44-AF5B-9CBA19E62A73",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web_appliance:7.0.0.27:*:*:*:*:*:*:*",
              "matchCriteriaId": "5675CDEE-09CB-49D9-8C71-0CD71238129F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web_appliance:7.0.0.28:*:*:*:*:*:*:*",
              "matchCriteriaId": "69978C3B-708B-4CDC-8FA0-65A98F2223E9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web_appliance:7.0.0.29:*:*:*:*:*:*:*",
              "matchCriteriaId": "74CAA03E-DE79-4527-918D-EA219DC2DA84",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web_appliance:7.0.0.30:*:*:*:*:*:*:*",
              "matchCriteriaId": "5DB312B8-7B65-4CE9-B399-2896450B5647",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web:8.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "6A4AD958-FDB2-4F63-AD4F-C88B33BFA692",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web:8.0.0.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "397073E9-9696-4B4C-926D-668EA4A52E7B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web:8.0.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "643E7B97-17AB-4209-804E-79E94F3D671F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web:8.0.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "4F807870-4976-43E1-89BE-F08DEEE109CD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web:8.0.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "B2B3E49D-08E6-44CF-B034-D155247B5DB9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web:8.0.0.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "E9F50A5E-111B-4CF6-A531-FE88E7735140",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web:8.0.0.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "D54372BE-6201-48AB-A720-F29E931E52B3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web:8.0.0.22:*:*:*:*:*:*:*",
              "matchCriteriaId": "BCCE958E-6DFA-403E-B251-F5BA7825A546",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web:8.0.0.31:*:*:*:*:*:*:*",
              "matchCriteriaId": "9DA2F71C-E15F-4729-A0D9-C8C116819546",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web:8.0.1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "39017599-E63F-4101-8D37-62D9B0CE6917",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web:8.0.1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "AB037932-234B-41AD-8119-D964796ADDFD",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web:8.0.1.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "8BA1DA71-91C8-4989-98B9-E924ED7B272A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web:8.0.1.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "3F884817-A712-4A89-B199-2E2483CD8363",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web:8.0.1.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "52F627D1-6FB4-47A2-817D-F9EC914DAC51",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web:8.0.1.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "6C428319-FFE3-4365-ABFE-1E6D1CABC0C1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_web:8.0.1.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "79613B00-9B72-43BB-A42A-3BB191021ED7",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_mobile:8.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "FF1B0C02-D5D9-4F10-9120-C76D39D5C323",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_mobile:8.0.0.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "44310E32-EA05-420B-8676-4E6EEAFB6631",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_mobile:8.0.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "8B93CED0-E8FA-4238-8963-46074D11A334",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_mobile:8.0.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "907BB0CF-D270-4493-8D61-9841E6C5FE45",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_mobile:8.0.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "E0801BD2-D95B-4703-9804-A555F9E7BA19",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_mobile:8.0.0.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "525EF7EC-712E-4C84-A15C-B2A30BD11A01",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_mobile:8.0.0.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "2EE90667-0C16-4E4B-98DC-A6AD7A073D64",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_mobile:8.0.0.22:*:*:*:*:*:*:*",
              "matchCriteriaId": "049DD26B-9CF5-4E0C-812E-76A1224A15FA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_mobile:8.0.0.31:*:*:*:*:*:*:*",
              "matchCriteriaId": "909073A4-C6D5-47D7-911F-C855DB693EF0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_mobile:8.0.1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "A523C406-D64C-4CE6-8CBE-34D4C060E0C1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_mobile:8.0.1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "707F0FE4-EC91-44FF-AA21-1E2A99AC5C26",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_mobile:8.0.1.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "F0D646B2-7308-43A0-AE76-873946FB024E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_mobile:8.0.1.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "4B1988E5-DFE6-4282-B9D3-6655297B481B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_mobile:8.0.1.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "4BEF4063-73D7-416D-AD21-CDC1C0534677",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_mobile:8.0.1.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "A8DFC0D0-2326-40CA-B4CC-65194566DA98",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager_for_mobile:8.0.1.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "1A180463-EDE0-47DB-A031-979E73AA2A33",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager:9.0.0.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "9FF57E01-A333-49D7-8B25-D65B66410DF4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager:9.0.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "A6B67748-2677-44E7-B43D-857EBCA926C2",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager:9.0.1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "2AEE420D-4686-4C58-B77A-2E509983F4C3",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager:9.0.2.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "D2C9CD3B-A25E-4DD1-9955-39E6E1EB4DC7",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager:9.0.2.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "AA399A01-351E-4587-9B0B-804452F09832",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager:9.0.3.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "FC682158-A8A0-4D2D-9ACD-ADF4093B7ECC",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:ibm:security_access_manager:9.0.3.0:if1:*:*:*:*:*:*",
              "matchCriteriaId": "A483F61A-0DAC-43DB-B69B-37A6207C1CF4",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "IBM Security Access Manager 6.1, 7.0, 8.0, and 9.0 e-community configurations may be affected by a redirect vulnerability. ECSSO Master Authentication can redirect to a server not participating in an e-community domain. IBM X-Force ID: 128687."
    },
    {
      "lang": "es",
      "value": "Las configuraciones e-community de IBM Security Access Manager 6.1, 7.0, 8.0, y 9.0 podr\u00edan estar afectadas por una vulnerabilidad de redirecci\u00f3n. ECSSO Master Authentication puede redireccionar a un servidor que no participa en un dominio e-community. IBM X-Force ID: 128687."
    }
  ],
  "id": "CVE-2017-1489",
  "lastModified": "2024-11-21T03:21:57.647",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 5.8,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 4.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 6.1,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "LOW",
          "integrityImpact": "LOW",
          "privilegesRequired": "NONE",
          "scope": "CHANGED",
          "userInteraction": "REQUIRED",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
          "version": "3.0"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 2.7,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2017-08-29T01:35:13.517",
  "references": [
    {
      "source": "psirt@us.ibm.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.ibm.com/support/docview.wss?uid=swg22006959"
    },
    {
      "source": "psirt@us.ibm.com",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/bid/100592"
    },
    {
      "source": "psirt@us.ibm.com",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securitytracker.com/id/1039227"
    },
    {
      "source": "psirt@us.ibm.com",
      "tags": [
        "VDB Entry",
        "Vendor Advisory"
      ],
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/128687"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.ibm.com/support/docview.wss?uid=swg22006959"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securityfocus.com/bid/100592"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "url": "http://www.securitytracker.com/id/1039227"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "VDB Entry",
        "Vendor Advisory"
      ],
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/128687"
    }
  ],
  "sourceIdentifier": "psirt@us.ibm.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-601"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.