CVE-2017-1534

IBM Security Access Manager Appliance 8.0.0 and 9.0.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof the URL displayed to redirect a user to a malicious Web site that would appear to be trusted. This could allow the attacker to obtain highly sensitive information or conduct further attacks against the victim. IBM X-Force ID: 130676.

• CWE-601

• http://www.ibm.com/support/docview.wss?uid=swg22008936Vendor Advisory
• http://www.securityfocus.com/bid/102509Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040169Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/130676VDB Entry, Vendor Advisory
• http://www.ibm.com/support/docview.wss?uid=swg22008936Vendor Advisory
• http://www.securityfocus.com/bid/102509Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040169Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/130676VDB Entry, Vendor Advisory

Published

Jan 10, 2018

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-15334The SIP backup feature in Huawei DP300 V500R002C00, IPS Modu…
• CVE-2017-15335The SIP backup feature in Huawei DP300 V500R002C00, IPS Modu…
• CVE-2017-15336The SIP backup feature in Huawei DP300 V500R002C00, IPS Modu…
• CVE-2017-15337The SIP module in Huawei DP300 V500R002C00, IPS Module V100R…
• CVE-2017-15338The SIP module in Huawei DP300 V500R002C00, IPS Module V100R…
• CVE-2017-15339The SIP module in Huawei DP300 V500R002C00, IPS Module V100R…
• CVE-2017-15340Huawei smartphones with software of TAG-AL00C92B168 have an …
• CVE-2017-15341Huawei AR3200 V200R008C20, V200R008C30, TE40 V600R006C00, TE…
• CVE-2017-15342Huawei DP300 V500R002C00, TE60 V600R006C00, TP3106 V100R002C…
• CVE-2017-15343Huawei AR3200 with software V200R006C10, V200R006C11, V200R0…
• CVE-2017-15344Huawei AR3200 with software V200R006C10, V200R006C11, V200R0…
• CVE-2017-15345Huawei Smartphones with software LON-L29DC721B186 have a den…