CVE-2014-6084
IBM Security Access Manager 7.x/8.x - Information Disclosure via Weak SSL Cipher
Title source: llmDescription
IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 make it easier for remote attackers to obtain sensitive information by sniffing the network during use of a weak SSL cipher.
References (4)
Core 4
Core References
Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21684475
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/95811
Various Sources vendor-advisory
x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1IV67358
Various Sources vendor-advisory
x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1IV67581
Scores
EPSS
0.0137
EPSS Percentile
69.0%
Details
CWE
CWE-310
Status
published
Products (3)
ibm/security_access_manager_for_mobile
8.0
ibm/security_access_manager_for_web
7.0
ibm/security_access_manager_for_web
8.0
Published
Dec 18, 2014
Tracked Since
Feb 18, 2026