Lucene search
HistoryDec 29, 2014 - 2:59 a.m.
CVE-2014-6168
cve-2014-6168
csrf
ibm security identity manager
xss
nvd
6 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
6.2 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
32.8%
Cross-site request forgery (CSRF) vulnerability in IBM Security Identity Manager 5.1 before 5.1.0.15 IF0056 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences.
Affected configurations
Node
ibmsecurity_identity_managerMatch5.1.0
ORibmsecurity_identity_managerMatch5.1.0.3
ORibmsecurity_identity_managerMatch5.1.0.4
ORibmsecurity_identity_managerMatch5.1.0.5
ORibmsecurity_identity_managerMatch5.1.0.6
ORibmsecurity_identity_managerMatch5.1.0.7
ORibmsecurity_identity_managerMatch5.1.0.8
ORibmsecurity_identity_managerMatch5.1.0.9
ORibmsecurity_identity_managerMatch5.1.0.10
ORibmsecurity_identity_managerMatch5.1.0.11
ORibmsecurity_identity_managerMatch5.1.0.12
ORibmsecurity_identity_managerMatch5.1.0.13
ORibmsecurity_identity_managerMatch5.1.0.14
ORibmsecurity_identity_managerMatch5.1.0.15
Related
prion
prion
Cross site request forgery (csrf)
2014-12-29 02:59:00
nvd
nvd
CVE-2014-6168
2014-12-29 02:59:02
ibm
ibm
cvelist
cvelist
CVE-2014-6168
2014-12-29 02:00:00
6 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
6.2 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
32.8%
Related for CVE-2014-6168