Directory traversal

Directory traversal vulnerability in IBM Security Identity Manager 6.x before 6.0.0.3 IF14 allows remote attackers to read arbitrary files via unspecified vectors...

Code injection

IBM Security Identity Manager 6.x before 6.0.0.3 IF14 allows remote attackers to conduct clickjacking attacks via unspecified vectors...

Cross site request forgery (csrf)

IBM Security Identity Manager 6.x before 6.0.0.3 IF14 allows remote attackers to discover cleartext passwords via a crafted request...

CVE-2014-6095

Directory traversal vulnerability in IBM Security Identity Manager 6.x before 6.0.0.3 IF14 allows remote attackers to read arbitrary files via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in IBM Security Identity Manager 6.x before 6.0.0.3 IF14 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2014-6095

Directory traversal vulnerability in IBM Security Identity Manager 6.x before 6.0.0.3 IF14 allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2014-6098

IBM Security Identity Manager 6.x before 6.0.0.3 IF14 allows remote attackers to discover cleartext passwords via a crafted request...

CVE-2014-6105

IBM Security Identity Manager 6.x before 6.0.0.3 IF14 allows remote attackers to conduct clickjacking attacks via unspecified vectors...

CVE-2014-6107

IBM Security Identity Manager 6.x before 6.0.0.3 IF14 allows remote attackers to obtain sensitive cookie information by sniffing the network during an HTTP session...

CVE-2014-6110

IBM Security Identity Manager 6.x before 6.0.0.3 IF14 does not properly perform logout actions, which allows remote attackers to access sessions by leveraging an unattended workstation...

CVE-2014-6105

IBM Security Identity Manager (SIM) 6.x prior to 6.0.0.3 IF14 is affected by a clickjacking vulnerability. A remote attacker could hijack the victim’s clicking actions by persuading them to visit a malicious page; no authentication is required. Impact is limited to the client-side click actions, ...

CVE-2014-6098

IBM Security Identity Manager 6.x prior to 6.0.0.3 IF14 is affected by CVE-2014-6098, where a crafted request to the web server can cause disclosure of cleartext passwords. Affected product and version: SIM 6.x before 6.0.0.3 IF14. Impact described: partial confidentiality loss via remote access ...

PT-2014-7041

Name of the Vulnerable Software and Affected Versions IBM Security Identity Manager versions prior to 6.0.0.3 IF14 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via a crafted URL. This can lead to the execution of malicious scripts on...

PT-2014-7047

Name of the Vulnerable Software and Affected Versions IBM Security Identity Manager versions prior to 6.0.0.3 IF14 Description The issue allows remote attackers to conduct clickjacking attacks. Recommendations For versions prior to 6.0.0.3 IF14, update to version 6.0.0.3 IF14 or later to resolve...

PT-2014-7043

Name of the Vulnerable Software and Affected Versions IBM Security Identity Manager versions prior to 6.0.0.3 IF14 Description The issue allows remote attackers to discover cleartext passwords by sending a crafted request. Recommendations For versions prior to 6.0.0.3 IF14, update to version...

PT-2014-7040

Name of the Vulnerable Software and Affected Versions IBM Security Identity Manager versions prior to 6.0.0.3 IF14 Description A directory traversal issue allows remote attackers to read arbitrary files. Recommendations For versions prior to 6.0.0.3 IF14, update to version 6.0.0.3 IF14 or later t...

PT-2014-7049

Name of the Vulnerable Software and Affected Versions IBM Security Identity Manager versions prior to 6.0.0.3 IF14 Description The issue arises from improper logout actions, allowing remote attackers to access sessions by leveraging an unattended workstation. Recommendations For versions prior to...

PT-2014-7048

Name of the Vulnerable Software and Affected Versions IBM Security Identity Manager versions prior to 6.0.0.3 IF14 Description The issue allows remote attackers to obtain sensitive cookie information by sniffing the network during an HTTP session. Recommendations For versions prior to 6.0.0.3 IF1...

CVE-2014-6110: Improper Access Control

IBM Security Identity Manager 6.x before 6.0.0.3 IF14 does not properly perform logout actions, which allows remote attackers to access sessions by leveraging an unattended workstation...

CVE-2014-6095: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in IBM Security Identity Manager 6.x before 6.0.0.3 IF14 allows remote attackers to read arbitrary files via unspecified vectors...