CVE-2014-0961

IBM Security Identity Manager and Tivoli Identity Manager - Authenticated Cross-Site Request Forgery

Title source: llm
STIX 2.1

Description

Cross-site request forgery (CSRF) vulnerability in IBM Tivoli Identity Manager (ITIM) 5.0 before 5.0.0.15 and 5.1 before 5.1.0.15 and IBM Security Identity Manager (ISIM) 6.0 before 6.0.0.2 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences.

References (4)

Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/92747
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/59080
Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21674754
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/67909

Scores

EPSS 0.0053
EPSS Percentile 40.8%

Details

CWE
CWE-352
Status published
Products (22)
ibm/security_identity_manager 6.0.0
ibm/security_identity_manager 6.0.0.1
ibm/tivoli_identity_manager 5.0.0
ibm/tivoli_identity_manager 5.0.0.6
ibm/tivoli_identity_manager 5.0.0.10
ibm/tivoli_identity_manager 5.0.0.11
ibm/tivoli_identity_manager 5.0.0.12
ibm/tivoli_identity_manager 5.0.0.13
ibm/tivoli_identity_manager 5.0.0.14
ibm/tivoli_identity_manager 5.1.0
... and 12 more
Published Jun 08, 2014
Tracked Since Feb 18, 2026