CVE-2014-6107 — Sensitive Information Exposure in IBM Security Identity Manager

CWE-200 — Sensitive Information Exposure3 documents3 sources
Severity
4.3MEDIUMNVD
EPSS
0.8%
top 26.45%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Security Identity Manager
Timeline
PublishedNov 18
Latest updateMay 17

Description

IBM Security Identity Manager 6.x before 6.0.0.3 IF14 allows remote attackers to obtain sensitive cookie information by sniffing the network during an HTTP session.

CVSS vector

AV:N/AC:M/C:P/I:N/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-x8v7-vx2p-55vf: IBM Security Identity Manager 6↗2022-05-17
▶
CVEList
CVE-2014-6107: IBM Security Identity Manager 6↗2014-11-18
▶
CVE-2014-6107 — Sensitive Information Exposure in IBM | cvebase