Description
IBM Single Sign On for Bluemix could allow a remote attacker to obtain sensitive information, caused by a XML external entity (XXE) error when processing XML data by the XML parser. A remote attacker could exploit this vulnerability to read arbitrary files on the system or cause a denial of service.
Affected products
- IBM Corporation / Access Manager9.0 – 9.0
- IBM Corporation / Access Manager9.0.0.1 – 9.0.0.1
- IBM Corporation / Access Manager9.0.1 – 9.0.1
- IBM Corporation / Access Manager7.0.0 – 7.0.0
- IBM Corporation / Access Manager8.0.0 – 8.0.0
- IBM Corporation / Access Manager8.0.0.1 – 8.0.0.1
- IBM Corporation / Access Manager8.0.0.2 – 8.0.0.2
- IBM Corporation / Access Manager8.0.0.3 – 8.0.0.3
- IBM Corporation / Access Manager8.0.0.4 – 8.0.0.4
- IBM Corporation / Access Manager8.0.0.5 – 8.0.0.5
- IBM Corporation / Access Manager8.0.1 – 8.0.1
- IBM Corporation / Access Manager8.0.1.2 – 8.0.1.2
- IBM Corporation / Access Manager8.0.1.3 – 8.0.1.3
- IBM Corporation / Access Manager8.0.1.4 – 8.0.1.4
- IBM Corporation / Access Manager9.0.0 – 9.0.0
- IBM Corporation / Access Manager9.0.1.0 – 9.0.1.0