Lucene search

[email protected]CVE-2014-0961

HistoryJun 08, 2014 - 6:55 p.m.

CVE-2014-0961

2014-06-0818:55:05

CWE-352

[email protected]

web.nvd.nist.gov

ibm

tivoli identity manager

itim

security identity manager

isim

csrf

vulnerability

xss

nvd

cve-2014-0961

6 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.2%

JSON

Cross-site request forgery (CSRF) vulnerability in IBM Tivoli Identity Manager (ITIM) 5.0 before 5.0.0.15 and 5.1 before 5.1.0.15 and IBM Security Identity Manager (ISIM) 6.0 before 6.0.0.2 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences.

Affected configurations

NVD

Node

ibmsecurity_identity_managerMatch6.0.0

ibmsecurity_identity_managerMatch6.0.0.1

ibmtivoli_identity_managerMatch5.0.0

ibmtivoli_identity_managerMatch5.0.0.6

ibmtivoli_identity_managerMatch5.0.0.10

ibmtivoli_identity_managerMatch5.0.0.11

ibmtivoli_identity_managerMatch5.0.0.12

ibmtivoli_identity_managerMatch5.0.0.13

ibmtivoli_identity_managerMatch5.0.0.14

ibmtivoli_identity_managerMatch5.1.0

ibmtivoli_identity_managerMatch5.1.0.3

ibmtivoli_identity_managerMatch5.1.0.4

ibmtivoli_identity_managerMatch5.1.0.5

ibmtivoli_identity_managerMatch5.1.0.6

ibmtivoli_identity_managerMatch5.1.0.7

ibmtivoli_identity_managerMatch5.1.0.8

ibmtivoli_identity_managerMatch5.1.0.9

ibmtivoli_identity_managerMatch5.1.0.10

ibmtivoli_identity_managerMatch5.1.0.11

ibmtivoli_identity_managerMatch5.1.0.12

ibmtivoli_identity_managerMatch5.1.0.13

ibmtivoli_identity_managerMatch5.1.0.14

CPENameOperatorVersion
ibm:security_identity_manageribm security identity managereq6.0.0
ibm:security_identity_manageribm security identity managereq6.0.0.1
ibm:tivoli_identity_manageribm tivoli identity managereq5.0.0
ibm:tivoli_identity_manageribm tivoli identity managereq5.0.0.6
ibm:tivoli_identity_manageribm tivoli identity managereq5.0.0.10
ibm:tivoli_identity_manageribm tivoli identity managereq5.0.0.11
ibm:tivoli_identity_manageribm tivoli identity managereq5.0.0.12
ibm:tivoli_identity_manageribm tivoli identity managereq5.0.0.13
ibm:tivoli_identity_manageribm tivoli identity managereq5.0.0.14
ibm:tivoli_identity_manageribm tivoli identity managereq5.1.0

CPE	Name	Operator	Version
ibm:security_identity_manager	ibm security identity manager	eq	6.0.0
ibm:security_identity_manager	ibm security identity manager	eq	6.0.0.1
ibm:tivoli_identity_manager	ibm tivoli identity manager	eq	5.0.0
ibm:tivoli_identity_manager	ibm tivoli identity manager	eq	5.0.0.6
ibm:tivoli_identity_manager	ibm tivoli identity manager	eq	5.0.0.10
ibm:tivoli_identity_manager	ibm tivoli identity manager	eq	5.0.0.11
ibm:tivoli_identity_manager	ibm tivoli identity manager	eq	5.0.0.12
ibm:tivoli_identity_manager	ibm tivoli identity manager	eq	5.0.0.13
ibm:tivoli_identity_manager	ibm tivoli identity manager	eq	5.0.0.14
ibm:tivoli_identity_manager	ibm tivoli identity manager	eq	5.1.0

Rows per page:

1-10 of 221

References

secunia.com/advisories/59080

www-01.ibm.com/support/docview.wss?uid=swg21674754

www.securityfocus.com/bid/67909

exchange.xforce.ibmcloud.com/vulnerabilities/92747

6 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.2%

JSON

Related for CVE-2014-0961

cvelist1 prion1 ibm1 nvd1