PT-2018-4280 · Ibm · Ibm Security Identity Manager+1

Brennan Brazeau + 4 · Published 2018-04-20 · Updated 2018-05-22 · CVE-2014-6112

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Tivoli Identity Manager versions 5.1.x through 5.1.0.15-ISS-TIM-IF0057 Security Identity Manager versions 6.0.x through 6.0.0.4-ISS-SIM-IF0001 Security Identity Manager versions 7.0.x through 7.0.0.0-ISS-SIM-IF0003

Description The issue makes it easier for remote attackers to obtain sensitive information by leveraging support for weak SSL ciphers.

Recommendations For IBM Tivoli Identity Manager versions 5.1.x through 5.1.0.15-ISS-TIM-IF0057, update to version 5.1.0.15-ISS-TIM-IF0057 or later. For Security Identity Manager versions 6.0.x through 6.0.0.4-ISS-SIM-IF0001, update to version 6.0.0.4-ISS-SIM-IF0001 or later. For Security Identity Manager versions 7.0.x through 7.0.0.0-ISS-SIM-IF0003, update to version 7.0.0.0-ISS-SIM-IF0003 or later.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2014-6112

Affected Products

Ibm Tivoli Identity Manager

Ibm Security Identity Manager

References · 3

• http://www-01.ibm.com/support/docview.wss?uid=swg21698020 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2014-6112 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/96184 · Vendor Advisory