CVE-2015-5013: IBM Security Access Manager 9.0 Firmware

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

The IBM Security Access Manager appliance includes configuration files that contain obfuscated plaintext-passwords which authenticated users can access.

Affected products

• IBM Security Access Manager 9.0 Firmware: any version
• IBM Security Access Manager For Mobile: any version
• IBM Security Access Manager For Web 8.0 Firmware: any version

Published 2017-02-08. Last modified 2026-06-17.