{
   configurations: [
      {
         nodes: [
            {
               cpeMatch: [
                  {
                     criteria: "cpe:2.3:o:ibm:security_access_manager_for_web_8.0_firmware:*:*:*:*:*:*:*:*",
                     matchCriteriaId: "35BD8955-4735-4FDC-906A-B404C4E36417",
                     vulnerable: true,
                  },
               ],
               negate: false,
               operator: "OR",
            },
            {
               cpeMatch: [
                  {
                     criteria: "cpe:2.3:h:ibm:security_access_manager_for_web_appliance:8.0:*:*:*:*:*:*:*",
                     matchCriteriaId: "1C5EBB4D-36F8-453C-9D2C-A63490144596",
                     vulnerable: false,
                  },
               ],
               negate: false,
               operator: "OR",
            },
         ],
         operator: "AND",
      },
      {
         nodes: [
            {
               cpeMatch: [
                  {
                     criteria: "cpe:2.3:a:ibm:security_access_manager_for_mobile:*:*:*:*:*:*:*:*",
                     matchCriteriaId: "6921A2CC-67D0-41B5-908B-F002C14AFD70",
                     vulnerable: true,
                  },
               ],
               negate: false,
               operator: "OR",
            },
            {
               cpeMatch: [
                  {
                     criteria: "cpe:2.3:h:ibm:security_access_manager_for_mobile_appliance:8.0:*:*:*:*:*:*:*",
                     matchCriteriaId: "506C4B29-BC71-4C56-BAB1-06E63BEB1DD3",
                     vulnerable: false,
                  },
               ],
               negate: false,
               operator: "OR",
            },
         ],
         operator: "AND",
      },
      {
         nodes: [
            {
               cpeMatch: [
                  {
                     criteria: "cpe:2.3:o:ibm:security_access_manager_9.0_firmware:*:*:*:*:*:*:*:*",
                     matchCriteriaId: "F5B95177-2AA3-45D4-895D-56CA35B32813",
                     vulnerable: true,
                  },
               ],
               negate: false,
               operator: "OR",
            },
            {
               cpeMatch: [
                  {
                     criteria: "cpe:2.3:h:ibm:security_access_manager_9.0:-:*:*:*:*:*:*:*",
                     matchCriteriaId: "F86981E3-B9F4-4C49-AFF3-07E6C3FFD452",
                     vulnerable: false,
                  },
               ],
               negate: false,
               operator: "OR",
            },
         ],
         operator: "AND",
      },
   ],
   cveTags: [],
   descriptions: [
      {
         lang: "en",
         value: "The IBM Security Access Manager appliance includes configuration files that contain obfuscated plaintext-passwords which authenticated users can access.",
      },
      {
         lang: "es",
         value: "El aparato IBM Security Access Manager incluye archivos de configuración que contienen contraseñas de texto claro obfuscadas a las que pueden acceder usuarios autenticados.",
      },
   ],
   id: "CVE-2015-5013",
   lastModified: "2025-04-20T01:37:25.860",
   metrics: {
      cvssMetricV2: [
         {
            acInsufInfo: false,
            baseSeverity: "LOW",
            cvssData: {
               accessComplexity: "LOW",
               accessVector: "LOCAL",
               authentication: "NONE",
               availabilityImpact: "NONE",
               baseScore: 2.1,
               confidentialityImpact: "PARTIAL",
               integrityImpact: "NONE",
               vectorString: "AV:L/AC:L/Au:N/C:P/I:N/A:N",
               version: "2.0",
            },
            exploitabilityScore: 3.9,
            impactScore: 2.9,
            obtainAllPrivilege: false,
            obtainOtherPrivilege: false,
            obtainUserPrivilege: false,
            source: "nvd@nist.gov",
            type: "Primary",
            userInteractionRequired: false,
         },
      ],
      cvssMetricV31: [
         {
            cvssData: {
               attackComplexity: "LOW",
               attackVector: "LOCAL",
               availabilityImpact: "NONE",
               baseScore: 5.5,
               baseSeverity: "MEDIUM",
               confidentialityImpact: "HIGH",
               integrityImpact: "NONE",
               privilegesRequired: "LOW",
               scope: "UNCHANGED",
               userInteraction: "NONE",
               vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
               version: "3.1",
            },
            exploitabilityScore: 1.8,
            impactScore: 3.6,
            source: "nvd@nist.gov",
            type: "Primary",
         },
      ],
   },
   published: "2017-02-08T19:59:00.213",
   references: [
      {
         source: "psirt@us.ibm.com",
         tags: [
            "Patch",
            "Vendor Advisory",
         ],
         url: "http://www.ibm.com/support/docview.wss?uid=swg21993722",
      },
      {
         source: "psirt@us.ibm.com",
         tags: [
            "Third Party Advisory",
            "VDB Entry",
         ],
         url: "http://www.securityfocus.com/bid/96090",
      },
      {
         source: "psirt@us.ibm.com",
         tags: [
            "Third Party Advisory",
            "VDB Entry",
         ],
         url: "http://www.securitytracker.com/id/1037792",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Patch",
            "Vendor Advisory",
         ],
         url: "http://www.ibm.com/support/docview.wss?uid=swg21993722",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Third Party Advisory",
            "VDB Entry",
         ],
         url: "http://www.securityfocus.com/bid/96090",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Third Party Advisory",
            "VDB Entry",
         ],
         url: "http://www.securitytracker.com/id/1037792",
      },
   ],
   sourceIdentifier: "psirt@us.ibm.com",
   vulnStatus: "Deferred",
   weaknesses: [
      {
         description: [
            {
               lang: "en",
               value: "CWE-522",
            },
         ],
         source: "nvd@nist.gov",
         type: "Primary",
      },
   ],
}

{
   configurations: [
      {
         nodes: [
            {
               cpeMatch: [
                  {
                     criteria: "cpe:2.3:o:ibm:security_access_manager_for_web_7.0_firmware:7.0.0.0:*:*:*:*:*:*:*",
                     matchCriteriaId: "842C3B2E-4807-4150-AD45-620ACC88423F",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:ibm:security_access_manager_for_web_7.0_firmware:7.0.0.1:*:*:*:*:*:*:*",
                     matchCriteriaId: "22433CE0-9772-48CE-8069-612FF3732C21",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:ibm:security_access_manager_for_web_7.0_firmware:7.0.0.2:*:*:*:*:*:*:*",
                     matchCriteriaId: "2569AA28-5C61-4BBD-A501-E1ACFA36837B",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:ibm:security_access_manager_for_web_7.0_firmware:7.0.0.3:*:*:*:*:*:*:*",
                     matchCriteriaId: "79AFD6BE-4ED1-4A9C-AF30-F083A7A4F418",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:ibm:security_access_manager_for_web_7.0_firmware:7.0.0.4:*:*:*:*:*:*:*",
                     matchCriteriaId: "3AB188A2-D7CE-4141-A55A-C074C84E366E",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:ibm:security_access_manager_for_web_7.0_firmware:7.0.0.5:*:*:*:*:*:*:*",
                     matchCriteriaId: "DE776097-1DA4-4F27-8E96-61E3D9FFE8D0",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:ibm:security_access_manager_for_web_7.0_firmware:7.0.0.6:*:*:*:*:*:*:*",
                     matchCriteriaId: "FE4E5283-0FEE-4F37-9C41-FA695063FF79",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:ibm:security_access_manager_for_web_7.0_firmware:7.0.0.7:*:*:*:*:*:*:*",
                     matchCriteriaId: "39D9B9CF-5F3D-4CA3-87A0-AAE1BA5F09C1",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:ibm:security_access_manager_for_web_7.0_firmware:7.0.0.8:*:*:*:*:*:*:*",
                     matchCriteriaId: "73EB6121-62CD-49FC-A1D2-5467B007253C",
                     vulnerable: true,
                  },
               ],
               negate: false,
               operator: "OR",
            },
            {
               cpeMatch: [
                  {
                     criteria: "cpe:2.3:h:ibm:security_access_manager_for_web_appliance:7.0:*:*:*:*:*:*:*",
                     matchCriteriaId: "A7844D23-8DAB-4A9A-B0D4-734DF8FBFE02",
                     vulnerable: true,
                  },
               ],
               negate: false,
               operator: "OR",
            },
         ],
         operator: "AND",
      },
      {
         nodes: [
            {
               cpeMatch: [
                  {
                     criteria: "cpe:2.3:o:ibm:security_access_manager_for_web_8.0_firmware:8.0.0.2:*:*:*:*:*:*:*",
                     matchCriteriaId: "97E19969-DD73-42F2-9E91-504E1663B268",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:ibm:security_access_manager_for_web_8.0_firmware:8.0.0.3:*:*:*:*:*:*:*",
                     matchCriteriaId: "F9CC2E05-5179-4241-A710-E582510EEB0D",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:ibm:security_access_manager_for_web_8.0_firmware:8.0.0.4:*:*:*:*:*:*:*",
                     matchCriteriaId: "0EE7B275-7B8D-45F9-86A5-8F4A4484F2B5",
                     vulnerable: true,
                  },
               ],
               negate: false,
               operator: "OR",
            },
            {
               cpeMatch: [
                  {
                     criteria: "cpe:2.3:h:ibm:security_access_manager_for_web_appliance:8.0:*:*:*:*:*:*:*",
                     matchCriteriaId: "1C5EBB4D-36F8-453C-9D2C-A63490144596",
                     vulnerable: true,
                  },
               ],
               negate: false,
               operator: "OR",
            },
         ],
         operator: "AND",
      },
      {
         nodes: [
            {
               cpeMatch: [
                  {
                     criteria: "cpe:2.3:o:ibm:security_access_manager_for_mobile_8.0_firmware:8.0.0.0:*:*:*:*:*:*:*",
                     matchCriteriaId: "36DBCDA9-E7D5-4DD4-933F-93EE8B954671",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:ibm:security_access_manager_for_mobile_8.0_firmware:8.0.0.1:*:*:*:*:*:*:*",
                     matchCriteriaId: "EA4B8E11-83D3-4B38-90B6-4C0F536D06B6",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:ibm:security_access_manager_for_mobile_8.0_firmware:8.0.0.3:*:*:*:*:*:*:*",
                     matchCriteriaId: "AD7C3FED-3B2F-4EC9-9A9B-05EFDB0AA56B",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:ibm:security_access_manager_for_mobile_8.0_firmware:8.0.0.4:*:*:*:*:*:*:*",
                     matchCriteriaId: "322E1B80-97BF-407E-AEFC-DD866F81B1CC",
                     vulnerable: true,
                  },
               ],
               negate: false,
               operator: "OR",
            },
            {
               cpeMatch: [
                  {
                     criteria: "cpe:2.3:h:ibm:security_access_manager_for_mobile_appliance:8.0:*:*:*:*:*:*:*",
                     matchCriteriaId: "506C4B29-BC71-4C56-BAB1-06E63BEB1DD3",
                     vulnerable: true,
                  },
               ],
               negate: false,
               operator: "OR",
            },
         ],
         operator: "AND",
      },
   ],
   cveTags: [],
   descriptions: [
      {
         lang: "en",
         value: "The administration console in IBM Security Access Manager for Web 7.x before 7.0.0-ISS-WGA-IF0009 and 8.x before 8.0.0-ISS-WGA-FP0005, and Security Access Manager for Mobile 8.x before 8.0.0-ISS-ISAM-FP0005, allows remote attackers to inject system commands via unspecified vectors.",
      },
      {
         lang: "es",
         value: "La consola de administración en IBM Security Access Manager for Web 7.x anterior a 7.0.0-ISS-WGA-IF0009 y 8.x anterior a 8.0.0-ISS-WGA-FP0005, y Security Access Manager for Mobile 8.x anterior a 8.0.0-ISS-ISAM-FP0005, permite a atacantes remotos inyectar comandos de sistema a través de vectores no especificados.",
      },
   ],
   id: "CVE-2014-4823",
   lastModified: "2025-04-12T10:46:40.837",
   metrics: {
      cvssMetricV2: [
         {
            acInsufInfo: false,
            baseSeverity: "HIGH",
            cvssData: {
               accessComplexity: "LOW",
               accessVector: "NETWORK",
               authentication: "NONE",
               availabilityImpact: "COMPLETE",
               baseScore: 10,
               confidentialityImpact: "COMPLETE",
               integrityImpact: "COMPLETE",
               vectorString: "AV:N/AC:L/Au:N/C:C/I:C/A:C",
               version: "2.0",
            },
            exploitabilityScore: 10,
            impactScore: 10,
            obtainAllPrivilege: false,
            obtainOtherPrivilege: false,
            obtainUserPrivilege: false,
            source: "nvd@nist.gov",
            type: "Primary",
            userInteractionRequired: false,
         },
      ],
   },
   published: "2014-10-03T01:55:07.313",
   references: [
      {
         source: "psirt@us.ibm.com",
         url: "http://secunia.com/advisories/61278",
      },
      {
         source: "psirt@us.ibm.com",
         url: "http://secunia.com/advisories/61294",
      },
      {
         source: "psirt@us.ibm.com",
         url: "http://www-01.ibm.com/support/docview.wss?uid=swg1IV64910",
      },
      {
         source: "psirt@us.ibm.com",
         url: "http://www-01.ibm.com/support/docview.wss?uid=swg1IV64919",
      },
      {
         source: "psirt@us.ibm.com",
         tags: [
            "Patch",
            "Vendor Advisory",
         ],
         url: "http://www-01.ibm.com/support/docview.wss?uid=swg21684466",
      },
      {
         source: "psirt@us.ibm.com",
         url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/95573",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://secunia.com/advisories/61278",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://secunia.com/advisories/61294",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www-01.ibm.com/support/docview.wss?uid=swg1IV64910",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www-01.ibm.com/support/docview.wss?uid=swg1IV64919",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Patch",
            "Vendor Advisory",
         ],
         url: "http://www-01.ibm.com/support/docview.wss?uid=swg21684466",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/95573",
      },
   ],
   sourceIdentifier: "psirt@us.ibm.com",
   vulnStatus: "Deferred",
   weaknesses: [
      {
         description: [
            {
               lang: "en",
               value: "CWE-78",
            },
         ],
         source: "nvd@nist.gov",
         type: "Primary",
      },
   ],
}

{
   configurations: [
      {
         nodes: [
            {
               cpeMatch: [
                  {
                     criteria: "cpe:2.3:o:ibm:security_access_manager_for_web_8.0_firmware:8.0.0.2:*:*:*:*:*:*:*",
                     matchCriteriaId: "97E19969-DD73-42F2-9E91-504E1663B268",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:ibm:security_access_manager_for_web_8.0_firmware:8.0.0.3:*:*:*:*:*:*:*",
                     matchCriteriaId: "F9CC2E05-5179-4241-A710-E582510EEB0D",
                     vulnerable: true,
                  },
               ],
               negate: false,
               operator: "OR",
            },
            {
               cpeMatch: [
                  {
                     criteria: "cpe:2.3:h:ibm:security_access_manager_for_web_appliance:8.0:*:*:*:*:*:*:*",
                     matchCriteriaId: "1C5EBB4D-36F8-453C-9D2C-A63490144596",
                     vulnerable: true,
                  },
               ],
               negate: false,
               operator: "OR",
            },
         ],
         operator: "AND",
      },
      {
         nodes: [
            {
               cpeMatch: [
                  {
                     criteria: "cpe:2.3:a:ibm:security_access_manager_for_mobile_software:8.0:*:*:*:*:*:*:*",
                     matchCriteriaId: "673DB620-B3D4-431D-A8F8-0EA4F53EC3AA",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:ibm:security_access_manager_for_web_software:7.0:*:*:*:*:*:*:*",
                     matchCriteriaId: "BACDCBD6-EEF3-4259-9866-A89105AA4C19",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:a:ibm:security_access_manager_for_web_software:8.0:*:*:*:*:*:*:*",
                     matchCriteriaId: "97CBEC75-1164-4E25-8D32-DBA39C6E8A25",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:h:ibm:security_access_manager_for_mobile_appliance:8.0:*:*:*:*:*:*:*",
                     matchCriteriaId: "506C4B29-BC71-4C56-BAB1-06E63BEB1DD3",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:h:ibm:security_access_manager_for_web_appliance:7.0:*:*:*:*:*:*:*",
                     matchCriteriaId: "A7844D23-8DAB-4A9A-B0D4-734DF8FBFE02",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:h:ibm:security_access_manager_for_web_appliance:8.0:*:*:*:*:*:*:*",
                     matchCriteriaId: "1C5EBB4D-36F8-453C-9D2C-A63490144596",
                     vulnerable: true,
                  },
               ],
               negate: false,
               operator: "OR",
            },
         ],
      },
   ],
   cveTags: [],
   descriptions: [
      {
         lang: "en",
         value: "The Local Management Interface (LMI) in IBM Security Access Manager (ISAM) for Mobile 8.0 with firmware 8.0.0.0 through 8.0.0.3 and IBM Security Access Manager for Web 7.0, and 8.0 with firmware 8.0.0.2 and 8.0.0.3, allows remote attackers to bypass authentication via a login action with invalid credentials.",
      },
      {
         lang: "es",
         value: "Local Management Interface (LMI) en IBM Security Access Manager (ISAM) for Mobile 8.0 con firmware 8.0.0.0 hasta 8.0.0.3 y IBM Security Access Manager for Web 7.0 y 8.0 con firmware 8.0.0.2 y 8.0.0.3, permite a atacantes remotos evadir autenticación a través de una acción de inicio de sesión con credenciales inválidas.",
      },
   ],
   id: "CVE-2014-3053",
   lastModified: "2025-04-12T10:46:40.837",
   metrics: {
      cvssMetricV2: [
         {
            acInsufInfo: false,
            baseSeverity: "HIGH",
            cvssData: {
               accessComplexity: "LOW",
               accessVector: "ADJACENT_NETWORK",
               authentication: "NONE",
               availabilityImpact: "COMPLETE",
               baseScore: 8,
               confidentialityImpact: "COMPLETE",
               integrityImpact: "PARTIAL",
               vectorString: "AV:A/AC:L/Au:N/C:C/I:P/A:C",
               version: "2.0",
            },
            exploitabilityScore: 6.5,
            impactScore: 9.5,
            obtainAllPrivilege: false,
            obtainOtherPrivilege: false,
            obtainUserPrivilege: false,
            source: "nvd@nist.gov",
            type: "Primary",
            userInteractionRequired: false,
         },
      ],
   },
   published: "2014-06-21T15:55:03.870",
   references: [
      {
         source: "psirt@us.ibm.com",
         url: "http://secunia.com/advisories/59381",
      },
      {
         source: "psirt@us.ibm.com",
         url: "http://secunia.com/advisories/59438",
      },
      {
         source: "psirt@us.ibm.com",
         url: "http://www-01.ibm.com/support/docview.wss?uid=swg1IV61557",
      },
      {
         source: "psirt@us.ibm.com",
         url: "http://www-01.ibm.com/support/docview.wss?uid=swg21676389",
      },
      {
         source: "psirt@us.ibm.com",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://www-01.ibm.com/support/docview.wss?uid=swg21676700",
      },
      {
         source: "psirt@us.ibm.com",
         url: "http://www.securityfocus.com/bid/68132",
      },
      {
         source: "psirt@us.ibm.com",
         url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/93501",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://secunia.com/advisories/59381",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://secunia.com/advisories/59438",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www-01.ibm.com/support/docview.wss?uid=swg1IV61557",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www-01.ibm.com/support/docview.wss?uid=swg21676389",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://www-01.ibm.com/support/docview.wss?uid=swg21676700",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.securityfocus.com/bid/68132",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/93501",
      },
   ],
   sourceIdentifier: "psirt@us.ibm.com",
   vulnStatus: "Deferred",
   weaknesses: [
      {
         description: [
            {
               lang: "en",
               value: "CWE-287",
            },
         ],
         source: "nvd@nist.gov",
         type: "Primary",
      },
   ],
}

{
   configurations: [
      {
         nodes: [
            {
               cpeMatch: [
                  {
                     criteria: "cpe:2.3:o:ibm:security_access_manager_9.0_firmware:9.0.0:*:*:*:*:*:*:*",
                     matchCriteriaId: "6B5B6BD9-C0DF-4359-A6C1-F66E24912800",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:ibm:security_access_manager_for_web_7.0_firmware:7.0.0.1:*:*:*:*:*:*:*",
                     matchCriteriaId: "22433CE0-9772-48CE-8069-612FF3732C21",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:ibm:security_access_manager_for_web_7.0_firmware:7.0.0.2:*:*:*:*:*:*:*",
                     matchCriteriaId: "2569AA28-5C61-4BBD-A501-E1ACFA36837B",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:ibm:security_access_manager_for_web_7.0_firmware:7.0.0.3:*:*:*:*:*:*:*",
                     matchCriteriaId: "79AFD6BE-4ED1-4A9C-AF30-F083A7A4F418",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:ibm:security_access_manager_for_web_7.0_firmware:7.0.0.4:*:*:*:*:*:*:*",
                     matchCriteriaId: "3AB188A2-D7CE-4141-A55A-C074C84E366E",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:ibm:security_access_manager_for_web_7.0_firmware:7.0.0.5:*:*:*:*:*:*:*",
                     matchCriteriaId: "DE776097-1DA4-4F27-8E96-61E3D9FFE8D0",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:ibm:security_access_manager_for_web_7.0_firmware:7.0.0.6:*:*:*:*:*:*:*",
                     matchCriteriaId: "FE4E5283-0FEE-4F37-9C41-FA695063FF79",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:ibm:security_access_manager_for_web_7.0_firmware:7.0.0.7:*:*:*:*:*:*:*",
                     matchCriteriaId: "39D9B9CF-5F3D-4CA3-87A0-AAE1BA5F09C1",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:ibm:security_access_manager_for_web_7.0_firmware:7.0.0.8:*:*:*:*:*:*:*",
                     matchCriteriaId: "73EB6121-62CD-49FC-A1D2-5467B007253C",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:ibm:security_access_manager_for_web_7.0_firmware:7.0.0.9:*:*:*:*:*:*:*",
                     matchCriteriaId: "A91ADDFE-9362-4D7E-B623-D662D81382E8",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:ibm:security_access_manager_for_web_7.0_firmware:7.0.0.10:*:*:*:*:*:*:*",
                     matchCriteriaId: "C8E0F31E-EB32-4442-91BE-95A9625F308F",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:ibm:security_access_manager_for_web_7.0_firmware:7.0.0.11:*:*:*:*:*:*:*",
                     matchCriteriaId: "701D729E-A817-4525-ADD9-EC810326B9E2",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:ibm:security_access_manager_for_web_7.0_firmware:7.0.0.12:*:*:*:*:*:*:*",
                     matchCriteriaId: "E5883F2E-83F4-4630-813B-21E533BA2CB7",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:ibm:security_access_manager_for_web_7.0_firmware:7.0.0.13:*:*:*:*:*:*:*",
                     matchCriteriaId: "A1FB9953-91A1-47BB-B6BF-088FA75BEBCA",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:ibm:security_access_manager_for_web_7.0_firmware:7.0.0.14:*:*:*:*:*:*:*",
                     matchCriteriaId: "CD7B0192-465A-48EF-8B51-FC6BC6EC464A",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:ibm:security_access_manager_for_web_7.0_firmware:7.0.0.15:*:*:*:*:*:*:*",
                     matchCriteriaId: "3E40F5AD-E090-4D0B-A580-D794F60215DB",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:ibm:security_access_manager_for_web_7.0_firmware:7.0.0.16:*:*:*:*:*:*:*",
                     matchCriteriaId: "EC5BD4D1-DD9B-4845-AF17-9B813C748D1A",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:ibm:security_access_manager_for_web_8.0_firmware:8.0.0.1:*:*:*:*:*:*:*",
                     matchCriteriaId: "4B0D27CF-70BF-4C72-A963-310272D8EBF7",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:ibm:security_access_manager_for_web_8.0_firmware:8.0.0.2:*:*:*:*:*:*:*",
                     matchCriteriaId: "97E19969-DD73-42F2-9E91-504E1663B268",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:ibm:security_access_manager_for_web_8.0_firmware:8.0.0.3:*:*:*:*:*:*:*",
                     matchCriteriaId: "F9CC2E05-5179-4241-A710-E582510EEB0D",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:ibm:security_access_manager_for_web_8.0_firmware:8.0.0.5:*:*:*:*:*:*:*",
                     matchCriteriaId: "BD1366C8-9C78-4B40-8E40-19C4DFEC2B1D",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:ibm:security_access_manager_for_web_8.0_firmware:8.0.1:*:*:*:*:*:*:*",
                     matchCriteriaId: "D331E67E-25D3-4C34-8118-49E2A8B29D96",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:ibm:security_access_manager_for_web_8.0_firmware:8.0.1.0:*:*:*:*:*:*:*",
                     matchCriteriaId: "73E4F0CD-26DF-4975-8F40-ECB8E03A08C2",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:ibm:security_access_manager_for_web_8.0_firmware:8.0.1.2:*:*:*:*:*:*:*",
                     matchCriteriaId: "FFE6F2A0-BD38-4853-A8FB-299A341FA0B6",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:ibm:security_access_manager_for_web_8.0_firmware:8.0.1.3:*:*:*:*:*:*:*",
                     matchCriteriaId: "D0122CE6-44D9-4A5F-8DD4-B1F7F229FDFB",
                     vulnerable: true,
                  },
               ],
               negate: false,
               operator: "OR",
            },
         ],
      },
   ],
   cveTags: [],
   descriptions: [
      {
         lang: "en",
         value: "IBM Security Access Manager for Web 7.0.0 before FP19 and 8.0 before 8.0.1.3 IF3, and Security Access Manager 9.0 before 9.0.0.0 IF1, allows remote authenticated users to execute arbitrary OS commands by leveraging Local Management Interface (LMI) access.",
      },
      {
         lang: "es",
         value: "IBM Security Access Manager for Web 7.0.0 en versiones anteriores a FP19 y 8.0 en versiones anteriores a 8.0.1.3 IF3 y Security Access Manager 9.0 en versiones anteriores a 9.0.0.0 IF1, permite a usuarios remotos autenticados ejecutar comandos del SO arbitrarios aprovechando el acceso Local Management Interface (LMI).",
      },
   ],
   id: "CVE-2015-5018",
   lastModified: "2025-04-12T10:46:40.837",
   metrics: {
      cvssMetricV2: [
         {
            acInsufInfo: false,
            baseSeverity: "HIGH",
            cvssData: {
               accessComplexity: "MEDIUM",
               accessVector: "NETWORK",
               authentication: "SINGLE",
               availabilityImpact: "COMPLETE",
               baseScore: 8.5,
               confidentialityImpact: "COMPLETE",
               integrityImpact: "COMPLETE",
               vectorString: "AV:N/AC:M/Au:S/C:C/I:C/A:C",
               version: "2.0",
            },
            exploitabilityScore: 6.8,
            impactScore: 10,
            obtainAllPrivilege: false,
            obtainOtherPrivilege: false,
            obtainUserPrivilege: false,
            source: "nvd@nist.gov",
            type: "Primary",
         },
      ],
      cvssMetricV30: [
         {
            cvssData: {
               attackComplexity: "HIGH",
               attackVector: "NETWORK",
               availabilityImpact: "HIGH",
               baseScore: 8,
               baseSeverity: "HIGH",
               confidentialityImpact: "HIGH",
               integrityImpact: "HIGH",
               privilegesRequired: "HIGH",
               scope: "CHANGED",
               userInteraction: "NONE",
               vectorString: "CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
               version: "3.0",
            },
            exploitabilityScore: 1.3,
            impactScore: 6,
            source: "nvd@nist.gov",
            type: "Primary",
         },
      ],
   },
   published: "2016-01-02T05:59:03.800",
   references: [
      {
         source: "psirt@us.ibm.com",
         url: "http://www-01.ibm.com/support/docview.wss?uid=swg1IV78768",
      },
      {
         source: "psirt@us.ibm.com",
         url: "http://www-01.ibm.com/support/docview.wss?uid=swg1IV78780",
      },
      {
         source: "psirt@us.ibm.com",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://www-01.ibm.com/support/docview.wss?uid=swg21970510",
      },
      {
         source: "psirt@us.ibm.com",
         url: "http://www.securitytracker.com/id/1034560",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www-01.ibm.com/support/docview.wss?uid=swg1IV78768",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www-01.ibm.com/support/docview.wss?uid=swg1IV78780",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://www-01.ibm.com/support/docview.wss?uid=swg21970510",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.securitytracker.com/id/1034560",
      },
   ],
   sourceIdentifier: "psirt@us.ibm.com",
   vulnStatus: "Deferred",
   weaknesses: [
      {
         description: [
            {
               lang: "en",
               value: "CWE-78",
            },
         ],
         source: "nvd@nist.gov",
         type: "Primary",
      },
   ],
}