CVE-2014-3053
First published: Sat Jun 21 2014(Updated: )
The Local Management Interface (LMI) in IBM Security Access Manager (ISAM) for Mobile 8.0 with firmware 8.0.0.0 through 8.0.0.3 and IBM Security Access Manager for Web 7.0, and 8.0 with firmware 8.0.0.2 and 8.0.0.3, allows remote attackers to bypass authentication via a login action with invalid credentials.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Ibm Security Access Manager For Web 8.0 Firmware | =8.0.0.2 | |
| Ibm Security Access Manager For Web 8.0 Firmware | =8.0.0.3 | |
| Ibm Security Access Manager For Web Appliance | =8.0 | |
| Ibm Security Access Manager For Mobile Software | =8.0 | |
| Ibm Security Access Manager For Web Software | =7.0 | |
| Ibm Security Access Manager For Web Software | =8.0 | |
| Ibm Security Access Manager For Mobile Appliance | =8.0 | |
| Ibm Security Access Manager For Web Appliance | =7.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://secunia.com/advisories/59381
- http://secunia.com/advisories/59438
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV61557
- http://www-01.ibm.com/support/docview.wss?uid=swg21676389
- http://www-01.ibm.com/support/docview.wss?uid=swg21676700
- http://www.securityfocus.com/bid/68132
- https://exchange.xforce.ibmcloud.com/vulnerabilities/93501
- collector/nvd-index
- agent/weakness
- agent/references
- agent/severity
- agent/author
- agent/type
- agent/description
- agent/event
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- agent/last-modified-date
- collector/mitre-cve
- source/MITRE
- vendor/ibm
- canonical/ibm security access manager for web 8.0 firmware
- version/ibm security access manager for web 8.0 firmware/8.0.0.2
- version/ibm security access manager for web 8.0 firmware/8.0.0.3
- canonical/ibm security access manager for web appliance
- version/ibm security access manager for web appliance/8.0
- canonical/ibm security access manager for mobile software
- version/ibm security access manager for mobile software/8.0
- canonical/ibm security access manager for web software
- version/ibm security access manager for web software/7.0
- version/ibm security access manager for web software/8.0
- canonical/ibm security access manager for mobile appliance
- version/ibm security access manager for mobile appliance/8.0
- version/ibm security access manager for web appliance/7.0