{"id":"CVE-2017-1474","aliases":["EUVD-2017-10490","GHSA-9g4r-jrww-j742"],"status":"published","title":"IBM Security Access Manager Appliance 7.0.0, 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1...","description":"IBM Security Access Manager Appliance 7.0.0, 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 128606.","severity":{"version":"3.0","score":5.3,"vector":"CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-07","score":0.01702,"percentile":0.77367,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2018-06-06T17:00:00Z","modified":"2026-06-17T01:14:26Z","products":[{"vendor":"ibm","product":"security access manager"},{"vendor":"ibm","product":"security_access_manager"},{"vendor":"ibm","product":"security_access_manager_for_mobile"},{"vendor":"ibm","product":"security_access_manager_for_web"}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/128606","tags":["vdb-entry","x_refsource_XF","x_transferred","VDB Entry","Vendor Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=swg22012329","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/104476","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-1474"},{"url":"https://github.com/advisories/GHSA-9g4r-jrww-j742"}],"sources":{"cve":[{"id":"CVE-2017-1474","description":"IBM Security Access Manager Appliance 7.0.0, 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 128606.","status":"published","published":"2018-06-06T17:00:00Z","modified":"2024-09-17T01:06:25.459Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O","level":"medium","assessor":"cna"}],"updated_at":"2026-11-02T14:33:19.548789Z"}],"euvd":[{"id":"EUVD-2017-10490","description":"IBM Security Access Manager Appliance 7.0.0, 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 128606.","status":"published","published":"2018-06-06T17:00:00Z","modified":"2024-09-17T01:06:25Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/A:N/AC:L/AV:N/C:L/I:N/PR:N/S:U/UI:N/E:U/RC:C/RL:O","level":"medium"}],"updated_at":"2026-11-03T00:28:52.69419Z"}],"ghsa":[{"id":"GHSA-9g4r-jrww-j742","title":"IBM Security Access Manager Appliance 7.0.0, 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1...","description":"IBM Security Access Manager Appliance 7.0.0, 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 128606.","status":"published","published":"2022-05-13T01:37:07Z","modified":"2023-02-01T05:09:05Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:50:55.065879Z"}],"nvd":[{"id":"CVE-2017-1474","description":"IBM Security Access Manager Appliance 7.0.0, 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 128606.","status":"published","published":"2018-06-06T17:29:00.263Z","modified":"2026-06-17T01:14:26.397Z","cvss":[{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"3.0","score":5.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:04:17.638656Z"}]}}