CVE-2014-6168

IBM Security Identity Manager 5.1 is vulnerable to Cross-Site Request Forgery (CSRF) due to improper validation of user-submitted input. In versions before 5.1.0.15 IF0056, a remote authenticated attacker could hijack user sessions for requests that insert XSS sequences. Impact described includes...