CVE-2014-6110

critical

Description

IBM Security Identity Manager 6.x before 6.0.0.3 IF14 does not properly perform logout actions, which allows remote attackers to access sessions by leveraging an unattended workstation.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/96179

http://www-01.ibm.com/support/docview.wss?uid=swg21689779

http://www-01.ibm.com/support/docview.wss?uid=swg1IV66645

http://www-01.ibm.com/support/docview.wss?uid=swg1IV66642

http://www-01.ibm.com/support/docview.wss?uid=swg1IV66637

http://www-01.ibm.com/support/docview.wss?uid=swg1IV66635

http://www-01.ibm.com/support/docview.wss?uid=swg1IV66624

http://www-01.ibm.com/support/docview.wss?uid=swg1IV66496

Details

Source: Mitre, NVD

Published: 2014-11-18

Updated: 2026-06-17

Risk Information

CVSS v2

Base Score: 2.1

Vector: CVSS2#AV:L/AC:L/Au:N/C:N/I:P/A:N

Severity: Low

CVSS v3

Base Score: 9.1

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Severity: Critical

EPSS

EPSS: 0.00158

Detections

Analytics