IBM Security Access Manager Appliance 9.0.4.0 and 9.0.5.0 could allow remote code execution when Advanced Access Control or Federation services are running. IBM X-Force ID: 147370.Referenceshttps://www.ibm.com/support/docview.wss?uid=ibm10719623http://www.securitytracker.com/id/1041557http://www.securityfocus.com/bid/105145https://exchange.xforce.ibmcloud.com/vulnerabilities/147370