CVE-2020-4499: Critical severity IBM ISAM vulnerability
IBM Security Access Manager 9.0.7 and IBM Security Verify Access 10.0.0 could allow an unauthorized public Oauth client to bypass some or all of the authentication checks and gain access to applications. IBM X-Force ID: 182216.
Other sources
IBM Security Access Manager Appliance could allow an unauthorized public Oauth client to bypass some or all of the authentication checks and gain access to applications.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2020-4499.
What is the title of the vulnerability?
The title of the vulnerability is 'IBM Security Access Manager Appliance could allow an unauthorized public Oauth client to bypass some…'
What is the description of the vulnerability?
The vulnerability allows an unauthorized public Oauth client to bypass some or all of the authentication checks and gain access to applications.
What is the affected software?
The affected software includes IBM Security Access Manager version 9.0.7 and IBM Security Verify Access version 10.0.0.
What is the severity of the vulnerability?
The severity of the vulnerability is critical, with a CVSS score of 9.8.
Where can I find more information about this vulnerability?
You can find more information about this vulnerability at the following references: [IBM X-Force ID: 182216](https://exchange.xforce.ibmcloud.com/vulnerabilities/182216) and [IBM Support Page](https://www.ibm.com/support/pages/node/6348046).