CVE-2014-3053

Опубликовано: 21 июн. 2014

Источник: nvd

CVSS2: 8

EPSS Низкий

Описание

The Local Management Interface (LMI) in IBM Security Access Manager (ISAM) for Mobile 8.0 with firmware 8.0.0.0 through 8.0.0.3 and IBM Security Access Manager for Web 7.0, and 8.0 with firmware 8.0.0.2 and 8.0.0.3, allows remote attackers to bypass authentication via a login action with invalid credentials.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:o:ibm:security_access_manager_for_web_8.0_firmware:8.0.0.2:*:*:*:*:*:*:*

cpe:2.3:o:ibm:security_access_manager_for_web_8.0_firmware:8.0.0.3:*:*:*:*:*:*:*

cpe:2.3:h:ibm:security_access_manager_for_web_appliance:8.0:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:ibm:security_access_manager_for_mobile_software:8.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_access_manager_for_web_software:7.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_access_manager_for_web_software:8.0:*:*:*:*:*:*:*

cpe:2.3:h:ibm:security_access_manager_for_mobile_appliance:8.0:*:*:*:*:*:*:*

cpe:2.3:h:ibm:security_access_manager_for_web_appliance:7.0:*:*:*:*:*:*:*

cpe:2.3:h:ibm:security_access_manager_for_web_appliance:8.0:*:*:*:*:*:*:*

EPSS

Процентиль: 73%

0.00783

Низкий

8 High

CVSS2

Дефекты

CWE-287

Связанные уязвимости

GHSA-xqhf-qrgr-g45h

github

больше 3 лет назад