Security Bulletin: IBM Security Access Manager for Mobile and IBM Security Access Manager for Web appliances - LMI Authentication Bypass (CVE-2014-3053)

Summary An undisclosed vulnerability can allow unauthorized users to login to the Local Management Interface of the IBM Security Access Manager for Mobile appliance / IBM Security Access Manager for Web appliance with invalid credentials. Vulnerability Details CVE ID: CVE-2014-3053 DESCRIPTION: I...

Security Bulletin: IBM Security Privileged Identity Manager virtual appliance - LMI Authentication Bypass (CVE-2014-3053)

Summary An undisclosed vulnerability can allow unauthorized users to login to the Local Management Interface of the IBM Security Privileged Identity Manager appliance with invalid credentials. Vulnerability Details CVE ID : CVE-2014-3053 DESCRIPTION: IBM Security Privileged Identity Manager fails...

CVE-2014-3053

The Local Management Interface LMI in IBM Security Access Manager ISAM for Mobile 8.0 with firmware 8.0.0.0 through 8.0.0.3 and IBM Security Access Manager for Web 7.0, and 8.0 with firmware 8.0.0.2 and 8.0.0.3, allows remote attackers to bypass authentication via a login action with invalid...

CVE-2014-3053

The CVE-2014-3053 issue affects IBM Security Access Manager for Mobile (8.0, firmware 8.0.0.0–8.0.0.3) and IBM Security Access Manager for Web (7.0 and 8.0; firmware 8.0.0.2–8.0.0.3). The Local Management Interface (LMI) can be bypassed via a login action with invalid credentials, enabling authen...