Unscored severity · published Oct 3, 2014
CVE-2014-4809
The WebSEAL component in IBM Security Access Manager for Web 7.x before 7.0.0-ISS-WGA-IF0009 and 8.x before 8.0.0-ISS-WGA-FP0005, when e-community SSO is enabled, allows remote…
–
CVSS
1.5%
EPSS
No
On KEV
Description
The WebSEAL component in IBM Security Access Manager for Web 7.x before 7.0.0-ISS-WGA-IF0009 and 8.x before 8.0.0-ISS-WGA-FP0005, when e-community SSO is enabled, allows remote attackers to cause a denial of service (component hang) via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.5% · higher than 75% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SA
Security Access Manager For Web 7.0 Firmware · Ibm
7.0.0.0; 7.0.0.1; 7.0.0.2; 7.0.0.3; 7.0.0.4; 7.0.0.5; +3 more · source: NVD
SA
Security Access Manager For Web 8.0 Firmware · Ibm
8.0.0.2; 8.0.0.3; 8.0.0.4 · source: NVD
SA
Security Access Manager For Web Appliance · Ibm
8.0; 7.0 · source: NVD
Affected product
SA
Security Access Manager For Web 7.0 Firmware
Ibm
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-4809
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-4809
secunia.com
http://secunia.com/advisories/61294
www-01.ibm.com
http://www-01.ibm.com/support/docview.wss?uid=swg1IV64915
Patch
http://www-01.ibm.com/support/docview.wss?uid=swg21685246
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/95376
More from Security Access Manager For Web 7.0 Firmware
9.8
CVE-2014-7169
GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
9.8
CVE-2014-6271
GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability
8.0
CVE-2015-5018
IBM Security Access Manager for Web 7.0.0 before FP19 and 8.0 before 8.0.1.3 IF3, and Security Access Manager 9.0 before 9.0.0.0 IF1, allows remote authenticated users to execute…
7.5
CVE-2016-5919
IBM Security Access Manager for Web 7.0.0, 8.0.0, and 9.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information
7.5
CVE-2016-3017
IBM Security Access Manager for Web could allow a remote attacker to obtain sensitive information due to security misconfigurations