CVE-2014-3053
First published: Sat Jun 21 2014(Updated: )
The Local Management Interface (LMI) in IBM Security Access Manager (ISAM) for Mobile 8.0 with firmware 8.0.0.0 through 8.0.0.3 and IBM Security Access Manager for Web 7.0, and 8.0 with firmware 8.0.0.2 and 8.0.0.3, allows remote attackers to bypass authentication via a login action with invalid credentials.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Security Access Manager for Web 8.0 | =8.0.0.2 | |
| IBM Security Access Manager for Web 8.0 | =8.0.0.3 | |
| IBM Security Access Manager for Web | =8.0 | |
| IBM Security Access Manager for Mobile | =8.0 | |
| IBM Security Access Manager for Web | =7.0 | |
| IBM Security Access Manager for Web | =8.0 | |
| IBM Security Access Manager for Mobile Appliance | =8.0 | |
| IBM Security Access Manager for Web | =7.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://secunia.com/advisories/59381
- http://secunia.com/advisories/59438
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV61557
- http://www-01.ibm.com/support/docview.wss?uid=swg21676389
- http://www-01.ibm.com/support/docview.wss?uid=swg21676700
- http://www.securityfocus.com/bid/68132
- https://exchange.xforce.ibmcloud.com/vulnerabilities/93501
Frequently Asked Questions
What is the severity of CVE-2014-3053?
CVE-2014-3053 has a medium severity rating, indicating it poses a moderate risk for exploitation.
How do I fix CVE-2014-3053?
To fix CVE-2014-3053, upgrade IBM Security Access Manager to versions 8.0.0.4 or later for affected installations.
What systems are affected by CVE-2014-3053?
CVE-2014-3053 affects IBM Security Access Manager for Web version 7.0 and 8.0 with specific firmware versions, as well as IBM Security Access Manager for Mobile 8.0.
Can CVE-2014-3053 allow unauthorized access?
Yes, CVE-2014-3053 can allow remote attackers to bypass authentication and gain unauthorized access.
Is there a workaround for CVE-2014-3053 if I can't immediately upgrade?
As of the identification of CVE-2014-3053, no specific workaround is provided; upgrading to the latest version is recommended.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/severity
- agent/last-modified-date
- agent/weakness
- agent/author
- agent/first-publish-date
- agent/event
- agent/description
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/ibm
- canonical/ibm security access manager for web 8.0
- version/ibm security access manager for web 8.0/8.0.0.2
- version/ibm security access manager for web 8.0/8.0.0.3
- canonical/ibm security access manager for web
- version/ibm security access manager for web/8.0
- canonical/ibm security access manager for mobile
- version/ibm security access manager for mobile/8.0
- version/ibm security access manager for web/7.0
- canonical/ibm security access manager for mobile appliance
- version/ibm security access manager for mobile appliance/8.0