CVE-2015-5013

Description

The IBM Security Access Manager appliance includes configuration files that contain obfuscated plaintext-passwords which authenticated users can access.

Affected products

• IBM Corporation / Access Manager8.0.0.2 – 8.0.0.2
• IBM Corporation / Access Manager8.0.0.3 – 8.0.0.3
• IBM Corporation / Access Manager9.0 – 9.0
• IBM Corporation / Access Manager9.0.0.1 – 9.0.0.1
• IBM Corporation / Access Manager9.0.1 – 9.0.1
• IBM Corporation / Access Manager7.0.0 – 7.0.0
• IBM Corporation / Access Manager8.0.0 – 8.0.0
• IBM Corporation / Access Manager8.0.0.1 – 8.0.0.1
• IBM Corporation / Access Manager8.0.0.4 – 8.0.0.4
• IBM Corporation / Access Manager8.0.0.5 – 8.0.0.5
• IBM Corporation / Access Manager8.0.1 – 8.0.1
• IBM Corporation / Access Manager8.0.1.2 – 8.0.1.2
• IBM Corporation / Access Manager8.0.1.3 – 8.0.1.3
• IBM Corporation / Access Manager8.0.1.4 – 8.0.1.4
• IBM Corporation / Access Manager9.0.0 – 9.0.0
• IBM Corporation / Access Manager9.0.1.0 – 9.0.1.0
• IBM Corporation / Access Manager9.0.2.0 – 9.0.2.0

References

• MISChttp://www.securityfocus.com/bid/96090
• MISChttp://www.ibm.com/support/docview.wss?uid=swg21993722
• MISChttp://www.securitytracker.com/id/1037792