Intelligence View
⚡ tsecurity.de Intelligence
IBM Security Access Manager 9.0.4.0/9.0.5.0 Advanced Access Control Remote Code Execution
A vulnerability was found in IBM Security Access Manager 9.0.4.0/9.0.5.0 (Network Authentication Software). It has been declared as critical. Affected by this vulnerability is some unknown processing of the component Advanced Access…
Reagiere als Erste:r — dein Feedback zählt!
A vulnerability was found in IBM Security Access Manager 9.0.4.0/9.0.5.0 (Network Authentication Software). It has been declared as critical. Affected by this vulnerability is some unknown processing of the component Advanced Access Control. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.
IoC Intelligence (2 Indikatoren)
9[.]0[.]4[.]09[.]0[.]5[.]0
CTI Threat Relationship Graph5 Knoten / 4 Relationen
IR-PLAYBOOK-RCE
HIGHSOC Incident Playbook: Remote Code Execution (RCE) Defense
1-Click Detection Engineering: Sigma & YARA Rules
SOC Readytitle: Detect Exploitation - IBM Security Access Manager 9.0.4.0/9.0.5.0 Advanced Access Control Remote Code Execution
id: ebeb5154-de82-4160-ab27-f91753fa8868
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
- https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-24
logsource:
category: network_connection
product: any
detection:
selection:
DestinationIp:
- '9.0.4.0'
- '9.0.5.0'
condition: selection
falsepositives:
- Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
- attack.initial_access
- attack.t1190rule CTI_Threat_Indicator {
meta:
author = "iShareStuff CTI Automated Detection Engine"
date = "2026-09-24"
description = "YARA Signature for "
strings:
$str = "IBM Security Access Manager 9." ascii wide
condition:
any of them
}
SOCIAL SHARE CARD GENERATOR