VYPR
Get started
← All advisories
High severity8.8NVD Advisory· Published Sep 28, 2017· Updated May 13, 2026

CVE-2017-1407

CVE-2017-1407

Description

IBM Security Identity Manager Virtual Appliance 6.0 and 7.0 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 127394.

Affected products

8
  • IBM/Security Identity Governance And Intelligence2 versions
    cpe:2.3:a:ibm:security_identity_governance_and_intelligence:5.2.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ibm:security_identity_governance_and_intelligence:5.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:security_identity_governance_and_intelligence:5.2.1:*:*:*:*:*:*:*
  • IBM/Security Identity Manager2 versions
    cpe:2.3:a:ibm:security_identity_manager:6.0.0.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ibm:security_identity_manager:6.0.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:security_identity_manager:7.0.0.0:*:*:*:*:*:*:*
  • IBM/Security Privileged Identity Manager3 versions
    cpe:2.3:a:ibm:security_privileged_identity_manager:2.0.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:ibm:security_privileged_identity_manager:2.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:security_privileged_identity_manager:2.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:security_privileged_identity_manager:2.0.2:*:*:*:*:*:*:*
  • IBM/Security Identity Managerv5
    Range: 6.0

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

3

News mentions

0

No linked articles in our index yet.