CVE-2017-1459: IBM Security Access Manager 9.0 Firmware

Medium severity, CVSS 4.2. EPSS: 0.6% chance of exploitation in the next 30 days.

IBM Security Access Manager Appliance 8.0.0 and 9.0.0 specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. IBM X-Force ID: 128378.

Affected products

• IBM Security Access Manager 9.0 Firmware: any version
• IBM Security Access Manager For Mobile: any version
• IBM Security Access Manager For Web 8.0 Firmware: any version

Published 2018-01-10. Last modified 2026-06-17.