CVE-2017-1489: IBM Security Access Manager

Medium severity, CVSS 6.1. EPSS: 1.2% chance of exploitation in the next 30 days.

IBM Security Access Manager 6.1, 7.0, 8.0, and 9.0 e-community configurations may be affected by a redirect vulnerability. ECSSO Master Authentication can redirect to a server not participating in an e-community domain. IBM X-Force ID: 128687.

Affected products

IBM Security Access Manager: version 9.0.0.0 only; version 9.0.0.1 only; version 9.0.1.0 only; version 9.0.2.0 only; version 9.0.2.1 only; version 9.0.3.0 only
IBM Security Access Manager For Mobile: version 8.0 only; version 8.0.0.0 only; version 8.0.0.1 only; version 8.0.0.2 only; version 8.0.0.3 only; version 8.0.0.4 only; …
IBM Security Access Manager For Web: version 8.0 only; version 8.0.0.0 only; version 8.0.0.1 only; version 8.0.0.2 only; version 8.0.0.3 only; version 8.0.0.4 only; …
IBM Security Access Manager For Web Appliance: version 7.0 only; version 7.0.0.1 only; version 7.0.0.2 only; version 7.0.0.3 only; version 7.0.0.4 only; version 7.0.0.5 only; …
IBM Security Access Manager For Web Software: version 7.0 only; version 7.0.0.1 only; version 7.0.0.2 only; version 7.0.0.3 only; version 7.0.0.4 only; version 7.0.0.5 only; …
IBM Tivoli Access Manager For E-Business: version 6.1.0 only; version 6.1.0.1 only; version 6.1.0.2 only; version 6.1.0.3 only; version 6.1.0.4 only; version 6.1.0.5 only; …

Published 2017-08-29. Last modified 2026-06-17.