CVE-2014-6106

Опубликовано: 18 сент. 2017

Источник: nvd

CVSS3: 8.8

CVSS2: 6.8

EPSS Низкий

Описание

Cross-site request forgery (CSRF) vulnerability in IBM Security Identity Manager 5.1, 6.0, and 7.0 allows remote attackers to hijack the authentication of users for requests that can cause cross-site scripting attacks, web cache poisoning, or other unspecified impacts via unknown vectors.

Ссылки

http://www.securityfocus.com/bid/73167
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/96145
Vendor Advisory
https://www-01.ibm.com/support/docview.wss?uid=swg21698020
Patch
Vendor Advisory
http://www.securityfocus.com/bid/73167
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/96145
Vendor Advisory
https://www-01.ibm.com/support/docview.wss?uid=swg21698020
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:security_identity_manager:5.1.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_identity_manager:5.1.0.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_identity_manager:5.1.0.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_identity_manager:5.1.0.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_identity_manager:5.1.0.6:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_identity_manager:5.1.0.7:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_identity_manager:5.1.0.8:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_identity_manager:5.1.0.9:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_identity_manager:5.1.0.10:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_identity_manager:5.1.0.11:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_identity_manager:5.1.0.12:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_identity_manager:5.1.0.13:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_identity_manager:5.1.0.14:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_identity_manager:5.1.0.15:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_identity_manager:6.0.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_identity_manager:6.0.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_identity_manager:6.0.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_identity_manager:6.0.0.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_identity_manager:6.0.0.4:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_identity_manager:7.0.0.0:*:*:*:*:*:*:*

EPSS

Процентиль: 30%

0.00109

Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-352

Связанные уязвимости

GHSA-55fh-chpw-5q5r