CVE-2014-6106

Cross-site request forgery (CSRF) vulnerability in IBM Security Identity Manager 5.1, 6.0, and 7.0 allows remote attackers to hijack the authentication of users for requests that can cause cross-site scripting attacks, web cache poisoning, or other unspecified impacts via unknown vectors.

Score

CVSS 3.0 8.8 High

Status

Modified - psirt@us.ibm.com

Published

2017-09-18

Last modified

2024-08-06

Weaknesses

CWE-352

Affected products

• Security Identity Manager (Ibm)

References

• http://www.securityfocus.com/bid/73167
• https://exchange.xforce.ibmcloud.com/vulnerabilities/96145
• https://www-01.ibm.com/support/docview.wss?uid=swg21698020