Security Bulletin: Fixes for Multiple Security Vulnerabilities in IBM Security Identity Manager available (CVE-2014-6110, CVE-2014-6098, CVE-2014-6096, CVE-2014,6105, CVE-2014-6107, CVE-2014-6095)

Summary There are multiple security vulnerabilities in various components used by IBM Security Identity Manager Vulnerability Details The following vulnerabilities affect IBM Security Identity Manager SIM. CVE-ID: CVE-2014-6110 DESCRIPTION: IBM Security Identity Manager could allow a local user t...

CVE-2014-6098

IBM Security Identity Manager 6.x prior to 6.0.0.3 IF14 is affected by CVE-2014-6098, where a crafted request to the web server can cause disclosure of cleartext passwords. Affected product and version: SIM 6.x before 6.0.0.3 IF14. Impact described: partial confidentiality loss via remote access ...