CVE-2014-6077 | BDVDB-2026-66842 Detail

Description#

Cross-site request forgery (CSRF) vulnerability in IBM Security Access Manager for Mobile 8.x before 8.0.1 and Security Access Manager for Web 7.x before 7.0.0 FP10 and 8.x before 8.0.1 allows remote attackers to hijack the authentication of arbitrary users for requests that insert XSS sequences.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www-01.ibm.com/support/docview.wss?uid=swg21684475
http://www-01.ibm.com/support/docview.wss?uid=swg1IV67358
https://exchange.xforce.ibmcloud.com/vulnerabilities/95730
http://www-01.ibm.com/support/docview.wss?uid=swg1IV67581

Exploit#

No public exploit known

History#

Version 12014-12-18Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.