PT-2018-4280 · Ibm · Ibm Security Identity Manager+1

Brennan Brazeau + 4 · Publicado 2018-04-20 · Atualizado 2018-05-22 · CVE-2014-6112

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Tivoli Identity Manager versions 5.1.x through 5.1.0.15-ISS-TIM-IF0057 Security Identity Manager versions 6.0.x through 6.0.0.4-ISS-SIM-IF0001 Security Identity Manager versions 7.0.x through 7.0.0.0-ISS-SIM-IF0003

Description The issue makes it easier for remote attackers to obtain sensitive information by leveraging support for weak SSL ciphers.

Recommendations For IBM Tivoli Identity Manager versions 5.1.x through 5.1.0.15-ISS-TIM-IF0057, update to version 5.1.0.15-ISS-TIM-IF0057 or later. For Security Identity Manager versions 6.0.x through 6.0.0.4-ISS-SIM-IF0001, update to version 6.0.0.4-ISS-SIM-IF0001 or later. For Security Identity Manager versions 7.0.x through 7.0.0.0-ISS-SIM-IF0003, update to version 7.0.0.0-ISS-SIM-IF0003 or later.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2014-6112

Produtos afetados

Ibm Tivoli Identity Manager

Ibm Security Identity Manager

Referências · 3

• http://www-01.ibm.com/support/docview.wss?uid=swg21698020 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2014-6112 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/96184 · Aviso do Fabricante