CVE-2014-6076

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2014-6076
IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 allow remote attackers to conduct clickjacking attacks via a crafted web site.

4.3 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References
Link Resource
http://www-01.ibm.com/support/docview.wss?uid=swg1IV67581
http://www-01.ibm.com/support/docview.wss?uid=swg1IV67358
http://www-01.ibm.com/support/docview.wss?uid=swg21684475 Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/95729
Configurations

Configuration 1 (hide)

cpe:2.3:a:ibm:security_access_manager_for_mobile:8.0:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:a:ibm:security_access_manager_for_web:7.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:security_access_manager_for_web:8.0:*:*:*:*:*:*:*
Information

Published : 2014-12-18 16:59

Updated : 2017-09-08 01:29

NVD link : CVE-2014-6076

Mitre link : CVE-2014-6076

JSON object : View

Products Affected

ibm

  • security_access_manager_for_web
  • security_access_manager_for_mobile
CWE
CWE-254

7PK - Security Features