CSRF in IBM Security Identity Manager
CVE-2014-6168
Cross-site request forgery (CSRF) vulnerability in IBM Security Identity Manager 5.1 before 5.1.0.15 IF0056 allows remote authenticated users to hijack the authentication of arbitrary users for requests that insert XSS sequences.
Vulnerability class: CSRF (Cross-Site Request Forgery)
EPSS: 0.005 (37.9th percentile) — read the EPSS interpretation.
Affected products
- Ibm Security_identity_manager — versions 5.1.0, 5.1.0.3, 5.1.0.4
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@us.ibm.com (x_refsource_CONFIRM, Vendor Advisory)
- psirt@us.ibm.com (vdb-entry, x_refsource_XF)