Security Bulletin: Fixes for Multiple Security Vulnerabilities in IBM Security Identity Manager available (CVE-2014-6110, CVE-2014-6098, CVE-2014-6096, CVE-2014,6105, CVE-2014-6107, CVE-2014-6095)

Summary There are multiple security vulnerabilities in various components used by IBM Security Identity Manager Vulnerability Details The following vulnerabilities affect IBM Security Identity Manager SIM. CVE-ID: CVE-2014-6110 DESCRIPTION: IBM Security Identity Manager could allow a local user t...

CVE-2014-6105

IBM Security Identity Manager (SIM) 6.x prior to 6.0.0.3 IF14 is affected by a clickjacking vulnerability. A remote attacker could hijack the victim’s clicking actions by persuading them to visit a malicious page; no authentication is required. Impact is limited to the client-side click actions, ...