IBM Security Access Manager for Enterprise Single Sign-On Information Disclosure Vulnerability

Bugtraq ID:	64477
Class:	Unknown
CVE:	CVE-2013-5420
Remote:	Yes
Local:	No
Published:	Dec 20 2013 12:00AM
Updated:	Dec 20 2013 12:00AM
Credit:	IBM
Vulnerable:	IBM IBM Security Access Manager for Enterprise Single Sign-On 8.2
Not Vulnerable:

IBM Security Access Manager for Enterprise Single Sign-On Information Disclosure Vulnerability

IBM Security Access Manager for Enterprise Single Sign-On is prone to an information-disclosure vulnerability.

Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks.

IBM Security Access Manager for Enterprise Single Sign-On 8.2 is vulnerable; other versions may also be affected.

IBM Security Access Manager for Enterprise Single Sign-On Information Disclosure Vulnerability

An attacker can exploit this issue using a web browser.

IBM Security Access Manager for Enterprise Single Sign-On Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

IBM Security Access Manager for Enterprise Single Sign-On Information Disclosure Vulnerability

References:

• IBM Security Access Manager for Enterprise Single Sign-On Homepage (IBM)
  
• Security Bulletin: IBM Security Access Manager for Enterprise Single Sign-On For (IBM)