CVE-2014-6110: Low severity ibm security identity manager vulnerability
Published Nov 18, 2014
·Updated
IBM Security Identity Manager 6.x before 6.0.0.3 IF14 does not properly perform logout actions, which allows remote attackers to access sessions by leveraging an unattended workstation.
Affected Software
4 affected components
IBM Security Identity Manager=6.0.0.0
IBM Security Identity Manager=6.0.0.1
IBM Security Identity Manager=6.0.0.2
IBM Security Identity Manager=6.0.0.3
Event History
Nov 18, 2014
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-6110?
CVE-2014-6110 is considered a moderate severity vulnerability as it allows unauthorized access to user sessions.
2
How do I fix CVE-2014-6110?
To fix CVE-2014-6110, upgrade IBM Security Identity Manager to version 6.0.0.3 or later.
3
What versions of IBM Security Identity Manager are affected by CVE-2014-6110?
CVE-2014-6110 affects IBM Security Identity Manager versions 6.0.0.0 through 6.0.0.2.
4
Can CVE-2014-6110 be exploited remotely?
Yes, CVE-2014-6110 can be exploited remotely by attackers to access unattended sessions.
5
What is the exploit scenario for CVE-2014-6110?
The exploit scenario for CVE-2014-6110 involves an attacker accessing a session on an unattended workstation after logout actions are not properly performed.