NetSight
high8.0

CVE-2014-3053

The Local Management Interface (LMI) in IBM Security Access Manager (ISAM) for Mobile 8.0 with firmware 8.0.0.0 through 8.0.0.3 and IBM Security Access Manager…

Impact

The Local Management Interface (LMI) in IBM Security Access Manager (ISAM) for Mobile 8.0 with firmware 8.0.0.0 through 8.0.0.3 and IBM Security Access Manager for Web 7.0, and 8.0 with firmware 8.0.0.2 and 8.0.0.3, allows remote attackers to bypass authentication via a login action with invalid credentials.

Affected products

VendorProductAffected versions
IbmSecurity Access Manager For Web 8.0 Firmware
Versions 8.0.0.2, 8.0.0.3
IbmSecurity Access Manager For Web Appliance
Versions 8.0, 7.0
IbmSecurity Access Manager For Mobile Software
Version 8.0
IbmSecurity Access Manager For Web Software
Versions 7.0, 8.0
IbmSecurity Access Manager For Mobile Appliance
Version 8.0

Weakness classification

References