CVE-2014-3053 The Local Management Interface (LMI) in IBM Security Access Manager (ISAM) for Mobile 8.0 with firmware 8.0.0.0 through 8.0.0.3 and IBM Security Access Manager for Web 7.0, and 8.0 with firmware 8.0.0...
HighCVSS 8.0
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Local Management Interface (LMI) in IBM Security Access Manager (ISAM) for Mobile 8.0 with firmware 8.0.0.0 through 8.0.0.3 and IBM Security Access Manager for Web 7.0, and 8.0 with firmware 8.0.0.2 and 8.0.0.3, allows remote attackers to bypass authentication via a login action with invalid credentials.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm security access manager for web 8.0 firmware | = 8.0.0.2 | No fix listed |
| ibm security access manager for web 8.0 firmware | = 8.0.0.3 | No fix listed |
| ibm security access manager for web appliance | = 8.0 | No fix listed |
| ibm security access manager for web appliance | = 7.0 | No fix listed |
| ibm security access manager for mobile software | = 8.0 | No fix listed |
| ibm security access manager for web software | = 7.0 | No fix listed |
| ibm security access manager for web software | = 8.0 | No fix listed |
| ibm security access manager for mobile appliance | = 8.0 | No fix listed |
References
- 59381 third-party-advisory
- 59438 third-party-advisory
- IV61557 vendor-advisory
- www-01.ibm.com
- www-01.ibm.com vendor-advisory
- 68132 vdb-entry
- ibm-isam-cve20143053-credentials(93501) vdb-entry