Login Request a demo
Unscored severity · published Nov 18, 2014
CVE-2014-6110
IBM Security Identity Manager 6.x before 6.0.0.3 IF14 does not properly perform logout actions, which allows remote attackers to access sessions by leveraging an unattended…
–
CVSS
0.6%
EPSS
No
On KEV
Description
IBM Security Identity Manager 6.x before 6.0.0.3 IF14 does not properly perform logout actions, which allows remote attackers to access sessions by leveraging an unattended workstation.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 47% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SI
Security Identity Manager · Ibm
6.0.0.0; 6.0.0.1; 6.0.0.2; 6.0.0.3 · source: NVD
Affected product
SI
Security Identity Manager
Ibm
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-6110
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-6110
www-01.ibm.com
http://www-01.ibm.com/support/docview.wss?uid=swg1IV66496
www-01.ibm.com
http://www-01.ibm.com/support/docview.wss?uid=swg1IV66624
www-01.ibm.com
http://www-01.ibm.com/support/docview.wss?uid=swg1IV66635
www-01.ibm.com
http://www-01.ibm.com/support/docview.wss?uid=swg1IV66637
www-01.ibm.com
http://www-01.ibm.com/support/docview.wss?uid=swg1IV66642
www-01.ibm.com
http://www-01.ibm.com/support/docview.wss?uid=swg1IV66645
More from Security Identity Manager
9.9
CVE-2018-1969
IBM Security Identity Manager 6.0.0 allows the attacker to upload or transfer files of dangerous types that can be automatically processed within the product's environment
9.8
CVE-2019-4675
IBM Security Identity Manager 7.0.1 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound…
8.8
CVE-2021-29686
IBM Security Identity Manager 7.0.2 could allow an authenticated user to bypass security and perform actions that they should not have access to
8.8
CVE-2019-4561
IBM Security Identity Manager 6.0.0 could allow a remote attacker to execute arbitrary code on the system, caused by the deserialization of untrusted data
8.8
CVE-2018-1453
IBM Security Identity Manager Virtual Appliance 7.0 allows an authenticated attacker to upload or transfer files of dangerous types that can be automatically processed within the…