IBM Security Bulletin: IBM Security Access Manager is affected by a redirect vulnerability (CVE-2017-1489)

IBM Security Access Manager has addressed a possible redirect vulnerability in IBM Security Access Manager e-community configurations.

CVE(s): CVE-2017-1489

Affected product(s) and affected version(s):

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2v9xxjW
X-Force Database: http://ift.tt/2vs9ZBO

The post IBM Security Bulletin: IBM Security Access Manager is affected by a redirect vulnerability (CVE-2017-1489) appeared first on IBM PSIRT Blog.

Affected IBM Security Access Manager Appliance	Affected Versions
IBM Security Access Manager for Web (appliance)	7.0 – 7.0.0.30
IBM Security Access Manager for Web	8.0 – 8.0.1.6
IBM Security Access Manager for Mobile	8.0 – 8.0.1.6
IBM Security Access Manager	9.0 – 9.0.3.0 IF1

Affected IBM Security Access Manager Software	Affected Versions
IBM Tivoli Access Manager for e-business	6.1 – 6.1.0.31
IBM Tivoli Access Manager for e-business	6.1.1 – 6.1.1.30
IBM Security Access Manager for Web (software)	7.0 – 7.0.0.30

from IBM Product Security Incident Response Team http://ift.tt/2v9uWpU