CVE-2014-6168

IBM Security Identity Manager 5.1 - Authenticated Cross-Site Request Forgery

Title source: llm
STIX 2.1

Description

Cross-site request forgery (CSRF) vulnerability in IBM Security Identity Manager 5.1 before 5.1.0.15 IF0056 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences.

References (2)

Core 2
Core References
Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21692907
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/97752

Scores

EPSS 0.0047
EPSS Percentile 37.2%

Details

CWE
CWE-352
Status published
Products (14)
ibm/security_identity_manager 5.1.0
ibm/security_identity_manager 5.1.0.3
ibm/security_identity_manager 5.1.0.4
ibm/security_identity_manager 5.1.0.5
ibm/security_identity_manager 5.1.0.6
ibm/security_identity_manager 5.1.0.7
ibm/security_identity_manager 5.1.0.8
ibm/security_identity_manager 5.1.0.9
ibm/security_identity_manager 5.1.0.10
ibm/security_identity_manager 5.1.0.11
... and 4 more
Published Dec 29, 2014
Tracked Since Feb 18, 2026