Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

authentication manager vulnerabilities and exploits

(subscribe to this query)
6
CVSSv2
CVE-2014-3037
Cross-site request forgery (CSRF) vulnerability in IBM Configuration Management Application (aka VVC) in IBM Rational Engineering Lifecycle Manager prior to 4.0.7 and 5.x prior to 5.0.1, Rational Software Architect Design Manager prior to 4.0.7 and 5.x prior to 5.0.1, and Rationa...
Ibm Rational Rhapsody Design Manager 3.0Ibm Rational Rhapsody Design Manager 3.0.0.1Ibm Rational Rhapsody Design Manager 4.0.5Ibm Rational Rhapsody Design Manager 3.0.1Ibm Rational Rhapsody Design Manager 4.0Ibm Rational Rhapsody Design Manager 5.0Ibm Rational Rhapsody Design Manager 4.0.1Ibm Rational Rhapsody Design Manager 4.0.2Ibm Rational Rhapsody Design ManagerIbm Rational Rhapsody Design Manager 4.0.3Ibm Rational Rhapsody Design Manager 4.0.4Ibm Rational Engineering Lifecycle Manager 5.0Ibm Rational Engineering Lifecycle Manager 1.0Ibm Rational Engineering Lifecycle Manager 1.0.0.1Ibm Rational Engineering Lifecycle Manager 4.05Ibm Rational Engineering Lifecycle ManagerIbm Rational Engineering Lifecycle Manager 4.03Ibm Rational Engineering Lifecycle Manager 4.04Ibm Rational Software Architect Design Manager 4.0.5Ibm Rational Software Architect Design ManagerIbm Rational Software Architect Design Manager 3.0Ibm Rational Software Architect Design Manager 3.0.0.1
6.8
CVSSv2
CVE-2016-0335
Cross-site request forgery (CSRF) vulnerability in IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 up to and including 7.0.1.0 prior to 7.0.1-ISS-SIM-FP0001 allows remote malicious users to hijack the authentication of users for requests that have unspecified impac...
Ibm Security Identity Manager 7.0.1.0Ibm Security Identity Manager 7.0.0.0Ibm Security Identity Manager 7.0.0.2Ibm Security Identity Manager 7.0.0.1Ibm Security Identity Manager 7.0.0.3
5.8
CVSSv2
CVE-2017-1489
IBM Security Access Manager 6.1, 7.0, 8.0, and 9.0 e-community configurations may be affected by a redirect vulnerability. ECSSO Master Authentication can redirect to a server not participating in an e-community domain. IBM X-Force ID: 128687.
Ibm Tivoli Access Manager For E-business 6.1.0.4Ibm Tivoli Access Manager For E-business 6.1.0.6Ibm Tivoli Access Manager For E-business 6.1.0.13Ibm Tivoli Access Manager For E-business 6.1.0.15Ibm Tivoli Access Manager For E-business 6.1.0.22Ibm Tivoli Access Manager For E-business 6.1.0.24Ibm Tivoli Access Manager For E-business 6.1.0.29Ibm Tivoli Access Manager For E-business 6.1.0.31Ibm Tivoli Access Manager For E-business 6.1.0Ibm Tivoli Access Manager For E-business 6.1.0.1Ibm Tivoli Access Manager For E-business 6.1.0.2Ibm Tivoli Access Manager For E-business 6.1.0.3Ibm Tivoli Access Manager For E-business 6.1.0.16Ibm Tivoli Access Manager For E-business 6.1.0.17Ibm Tivoli Access Manager For E-business 6.1.0.18Ibm Tivoli Access Manager For E-business 6.1.0.19Ibm Tivoli Access Manager For E-business 6.1.0.20Ibm Tivoli Access Manager For E-business 6.1.0.8Ibm Tivoli Access Manager For E-business 6.1.0.9Ibm Tivoli Access Manager For E-business 6.1.0.10Ibm Tivoli Access Manager For E-business 6.1.0.11Ibm Tivoli Access Manager For E-business 6.1.0.25
3.5
CVSSv2
CVE-2014-6148
IBM Tivoli Application Dependency Discovery Manager (TADDM) 7.2.0.0 up to and including 7.2.0.10, 7.2.1.0 up to and including 7.2.1.6, and 7.2.2.0 up to and including 7.2.2.2 does not require TADDM authentication for rptdesign downloads, which allows remote authenticated users to...
Ibm Tivoli Application Dependency Discovery Manager 7.2.0.5Ibm Tivoli Application Dependency Discovery Manager 7.2.0.6Ibm Tivoli Application Dependency Discovery Manager 7.2.1.3Ibm Tivoli Application Dependency Discovery Manager 7.2.1.4Ibm Tivoli Application Dependency Discovery Manager 7.2.0.2Ibm Tivoli Application Dependency Discovery Manager 7.2.0.3Ibm Tivoli Application Dependency Discovery Manager 7.2.0.4Ibm Tivoli Application Dependency Discovery Manager 7.2.1.1Ibm Tivoli Application Dependency Discovery Manager 7.2.1.2Ibm Tivoli Application Dependency Discovery Manager 7.2.2.2Ibm Tivoli Application Dependency Discovery Manager 7.2.0.0Ibm Tivoli Application Dependency Discovery Manager 7.2.0.7Ibm Tivoli Application Dependency Discovery Manager 7.2.0.8Ibm Tivoli Application Dependency Discovery Manager 7.2.1.5Ibm Tivoli Application Dependency Discovery Manager 7.2.1.6Ibm Tivoli Application Dependency Discovery Manager 7.2.0.1Ibm Tivoli Application Dependency Discovery Manager 7.2.0.10Ibm Tivoli Application Dependency Discovery Manager 7.2.0.9Ibm Tivoli Application Dependency Discovery Manager 7.2.1Ibm Tivoli Application Dependency Discovery Manager 7.2.2Ibm Tivoli Application Dependency Discovery Manager 7.2.2.1
6.8
CVSSv2
CVE-2012-6629
Multiple cross-site request forgery (CSRF) vulnerabilities in the Newsletter Manager plugin 1.0.2 and previous versions for WordPress allow remote malicious users to hijack the authentication of administrators for requests that (1) change an email address or (2) conduct script in...
Xyzscripts Newsletter ManagerXyzscripts Newsletter Manager 1.0.1Xyzscripts Newsletter Manager 1.0
6.8
CVSSv2
CVE-2014-4188
Cross-site request forgery (CSRF) vulnerability in Hitachi Tuning Manager prior to 7.6.1-06 and 8.x prior to 8.0.0-04 and JP1/Performance Management - Manager Web Option 07-00 through 07-54 allows remote malicious users to hijack the authentication of unspecified victims via unkn...
Hitachi Tuning Manager 6.0.0Hitachi Tuning Manager 7.1.0Hitachi Tuning Manager 8.0.0Hitachi Jp1\\/performance Management-manager Web Option 07-00Hitachi Tuning Manager 7.6.1Hitachi Jp1\\/performance Management-manager Web Option 07-54
6.4
CVSSv2
CVE-2008-4319
fileadmin.php in Libra File Manager (aka Libra PHP File Manager) 1.18 and previous versions allows remote malicious users to bypass authentication, and read arbitrary files, modify arbitrary files, and list arbitrary directories, by inserting certain user and isadmin parameters i...
Libra File Manager Php Filemanager 1.05Libra File Manager Php Filemanager 1.08Libra File Manager Php FilemanagerLibra File Manager Php Filemanager 1.17Libra File Manager Php Filemanager 1.00Libra File Manager Php Filemanager 1.03
5
CVSSv2
CVE-2012-3315
The Java servlets in the management console in IBM Tivoli Federated Identity Manager (TFIM) up to and including 6.2.2 and Tivoli Federated Identity Manager Business Gateway (TFIMBG) prior to 6.2.2 do not require authentication for all resource downloads, which allows remote malic...
Ibm Tivoli Federated Identity ManagerIbm Tivoli Federated Identity Manager 6.2.0.9Ibm Tivoli Federated Identity Manager 6.2.0.2Ibm Tivoli Federated Identity Manager 6.2.0.8Ibm Tivoli Federated Identity Manager 6.2.0.3Ibm Tivoli Federated Identity Manager 6.2.1Ibm Tivoli Federated Identity Manager 6.1.1Ibm Tivoli Federated Identity Manager 6.2.0Ibm Tivoli Federated Identity Manager 6.2.0.1Ibm Tivoli Federated Identity Manager Business Gateway 6.1.1Ibm Tivoli Federated Identity Manager Business Gateway 6.2.0.1Ibm Tivoli Federated Identity Manager Business Gateway 6.2.0Ibm Tivoli Federated Identity Manager Business GatewayIbm Tivoli Federated Identity Manager Business Gateway 6.2.0.8Ibm Tivoli Federated Identity Manager Business Gateway 6.2.0.3Ibm Tivoli Federated Identity Manager Business Gateway 6.2.0.2
6.8
CVSSv2
CVE-2015-6468
Cross-site request forgery (CSRF) vulnerability in Resource Data Management Data Manager prior to 2.2 allows remote malicious users to hijack the authentication of unspecified victims via unknown vectors.
Resource Data Management Data Manager Data Manager
4.3
CVSSv2
CVE-2009-4879
The Identity Server in Novell Access Manager prior to 3.1 SP1 allows attackers with disabled Active Directory accounts to authenticate using X.509 authentication, which bypasses intended access restrictions.
Novell Access Manager 3Novell Access Manager
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
NULL pointer dereferenceCVE-2023-52689CVE-2024-23803client sideCVE-2023-52696information disclosureCVE-2024-35843CVE-2024-27130CVE-2023-52697
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook