High severity · published Jan 2, 2016
CVE-2015-5018
IBM Security Access Manager for Web 7.0.0 before FP19 and 8.0 before 8.0.1.3 IF3, and Security Access Manager 9.0 before 9.0.0.0 IF1, allows remote authenticated users to execute…
8.0
CVSS
2.7%
EPSS
No
On KEV
Description
IBM Security Access Manager for Web 7.0.0 before FP19 and 8.0 before 8.0.1.3 IF3, and Security Access Manager 9.0 before 9.0.0.0 IF1, allows remote authenticated users to execute arbitrary OS commands by leveraging Local Management Interface (LMI) access.
CVSS vector
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Attack vector
Network
Complexity
High
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)2.7% · higher than 86% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SA
Security Access Manager 9.0 Firmware · Ibm
9.0.0 · source: NVD
SA
Security Access Manager For Web 7.0 Firmware · Ibm
7.0.0.1; 7.0.0.2; 7.0.0.3; 7.0.0.4; 7.0.0.5; 7.0.0.6; +10 more · source: NVD
SA
Security Access Manager For Web 8.0 Firmware · Ibm
8.0.0.1; 8.0.0.2; 8.0.0.3; 8.0.0.5; 8.0.1; 8.0.1.0; +2 more · source: NVD
Affected product
SA
Security Access Manager 9.0 Firmware
Ibm
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-5018
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-5018
www-01.ibm.com
http://www-01.ibm.com/support/docview.wss?uid=swg1IV78768
www-01.ibm.com
http://www-01.ibm.com/support/docview.wss?uid=swg1IV78780
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21970510
www.securitytracker.com
http://www.securitytracker.com/id/1034560
More from Security Access Manager 9.0 Firmware
9.1
CVE-2016-2908
IBM Single Sign On for Bluemix could allow a remote attacker to obtain sensitive information, caused by a XML external entity (XXE) error when processing XML data by the XML…
8.8
CVE-2017-1453
IBM Security Access Manager Appliance 9.0.3 could allow a remote authenticated attacker to execute arbitrary commands on the system
8.8
CVE-2016-3029
IBM Security Access Manager for Web is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user…
8.1
CVE-2017-1477
IBM Security Access Manager Appliance 9.0.3 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data
7.5
CVE-2016-5919
IBM Security Access Manager for Web 7.0.0, 8.0.0, and 9.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information