Multiple IBM Products CVE-2018-1443 Authentication Bypass Vulnerability

Bugtraq ID:	103365
Class:	Access Validation Error
CVE:	CVE-2018-1443
Remote:	Yes
Local:	No
Published:	Mar 02 2018 12:00AM
Updated:	Mar 02 2018 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	IBM Tivoli Federated Identity Manager 6.2.1 IBM Tivoli Federated Identity Manager 6.2 IBM Tivoli Federated Identity Manager 6.2.2 IBM Security Access Manager 9.0.4.0 IBM Security Access Manager 9.0.3.1 IBM Security Access Manager 9.0.3.0 IBM Security Access Manager 9.0.2.0 IBM Security Access Manager 9.0.1.0
Not Vulnerable:

Multiple IBM Products CVE-2018-1443 Authentication Bypass Vulnerability

Multiple IBM Products are prone to an authentication-bypass vulnerability.

An attacker can exploit this issue to bypass the authentication mechanism and perform unauthorized actions. This may lead to further attacks.

The following products are vulnerable:

IBM Security Access Manager 9.0.0 through 9.0.4
IBM Tivoli Federated Identity Manager 6.2, 6.2.1 and 6.2.2

Multiple IBM Products CVE-2018-1443 Authentication Bypass Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Multiple IBM Products CVE-2018-1443 Authentication Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Multiple IBM Products CVE-2018-1443 Authentication Bypass Vulnerability

References:

• Tivoli Federated Identity Manager Homepage (IBM)
  
• Security Bulletin: IBM Security Access Manager Appliance is affected by a Securi (IBM)
  
• Security Bulletin: IBM Tivoli Federated Identity Manager is affected by a Securi (IBM)