Login Request a demo
Unscored severity · published Jun 21, 2014
CVE-2014-3053
The Local Management Interface (LMI) in IBM Security Access Manager (ISAM) for Mobile 8.0 with firmware 8.0.0.0 through 8.0.0.3 and IBM Security Access Manager for Web 7.0, and…
–
CVSS
1.4%
EPSS
No
On KEV
Description
The Local Management Interface (LMI) in IBM Security Access Manager (ISAM) for Mobile 8.0 with firmware 8.0.0.0 through 8.0.0.3 and IBM Security Access Manager for Web 7.0, and 8.0 with firmware 8.0.0.2 and 8.0.0.3, allows remote attackers to bypass authentication via a login action with invalid credentials.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 72% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SA
Security Access Manager For Mobile Appliance · Ibm
8.0 · source: NVD
SA
Security Access Manager For Mobile Software · Ibm
8.0 · source: NVD
SA
Security Access Manager For Web 8.0 Firmware · Ibm
8.0.0.2; 8.0.0.3 · source: NVD
SA
Security Access Manager For Web Appliance · Ibm
8.0; 7.0; 8.0 · source: NVD
SA
Security Access Manager For Web Software · Ibm
7.0; 8.0 · source: NVD
Affected product
SA
Security Access Manager For Mobile Appliance
Ibm
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-3053
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-3053
secunia.com
http://secunia.com/advisories/59381
secunia.com
http://secunia.com/advisories/59438
www-01.ibm.com
http://www-01.ibm.com/support/docview.wss?uid=swg1IV61557
www-01.ibm.com
http://www-01.ibm.com/support/docview.wss?uid=swg21676389
Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21676700
www.securityfocus.com
http://www.securityfocus.com/bid/68132
More from Security Access Manager For Mobile Appliance
–
CVE-2014-6079
Cross-site scripting (XSS) vulnerability in the Local Management Interface in IBM Security Access Manager for Web 7.x before 7.0.0-ISS-WGA-IF0009 and 8.x before…
–
CVE-2014-4823
The administration console in IBM Security Access Manager for Web 7.x before 7.0.0-ISS-WGA-IF0009 and 8.x before 8.0.0-ISS-WGA-FP0005, and Security Access Manager for Mobile 8.x…
–
CVE-2014-3073
Unspecified vulnerability in IBM Security Access Manager (ISAM) for Mobile 8.0 and IBM Security Access Manager for Web 7.0 and 8.0 allows remote attackers to execute arbitrary…