VYPR
← All advisories
High severity8.8NVD Advisory· Published Sep 28, 2017· Updated Jun 17, 2026

CVE-2017-1407

CVE-2017-1407

Description

IBM Security Identity Manager Virtual Appliance 6.0 and 7.0 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 127394.

Affected products

9
  • IBM/Security Identity Governance And Intelligence2 versions
    cpe:2.3:a:ibm:security_identity_governance_and_intelligence:5.2.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:ibm:security_identity_governance_and_intelligence:5.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:security_identity_governance_and_intelligence:5.2.1:*:*:*:*:*:*:*
  • IBM/Security Identity Manager3 versions
    cpe:2.3:a:ibm:security_identity_manager:6.0.0.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:ibm:security_identity_manager:6.0.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:security_identity_manager:7.0.0.0:*:*:*:*:*:*:*
    • (no CPE)range: 6.0
  • IBM/Security Privileged Identity Manager3 versions
    cpe:2.3:a:ibm:security_privileged_identity_manager:2.0.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:ibm:security_privileged_identity_manager:2.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:security_privileged_identity_manager:2.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:security_privileged_identity_manager:2.0.2:*:*:*:*:*:*:*
  • IBM/Security Identity Manager Virtual Appliancellm-fuzzy
    Range: 6.0 and 7.0

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.