Vulnerability Bulletins

IBM Security Bulletin: IBM Security Privileged Identity Manager virtual appliance - LMI Authentication Bypass (CVE-2014-3053)

   
Affected software IBM
 
An undisclosed vulnerability can allow unauthorized users to login to the Local Management Interface of the IBM Security Privileged Identity Manager appliance with invalid credentials. CVE(s): CVE-2014-3053 Affected product(s) and affected version(s): IBM Security Privileged Identity Manager Virtual Appliance (ISPIM VA) 1.0.1 Refer to the following reference URLs for remediation and additional vulnerability details: Source Bulletin:

More info:

https://www-304.ibm.com/connections/blogs/PSIRT/entry/ibm_security_bulletin_ibm_security_privileged_identity_manager_virtual_appliance_lmi_authentication_bypass_cve_2014_3053?lang=en_us