VULNERABILITY INTELLIGENCE
CVE-2014-3053
CVSS score8 HIGH
EPSS probability1.37%
CISA KEVNot currently listed
Published2014-06-21
Last modified2026-06-17
CVSS vectorAV:A/AC:L/Au:N/C:C/I:P/A:C
Description
The Local Management Interface (LMI) in IBM Security Access Manager (ISAM) for Mobile 8.0 with firmware 8.0.0.0 through 8.0.0.3 and IBM Security Access Manager for Web 7.0, and 8.0 with firmware 8.0.0.2 and 8.0.0.3, allows remote attackers to bypass authentication via a login action with invalid credentials.
Weakness classification
- CWE-287: Improper Authentication
Primary references
- psirt@us.ibm.com
- psirt@us.ibm.com
- psirt@us.ibm.com
- psirt@us.ibm.com
- psirt@us.ibm.com — Vendor Advisory
- psirt@us.ibm.com
- psirt@us.ibm.com
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory