Show filters
4 Total Results
Displaying 1-4 of 4
Sort by:
Attacker Value
Unknown

CVE-2015-4929

Disclosure Date: October 11, 2015 (last updated October 05, 2023)
IBM License Metric Tool 9 before 9.2.1.0 and Endpoint Manager for Software Use Analysis 9 before 9.2.1.0 allow remote authenticated users to bypass intended access restrictions and obtain sensitive information via a REST API request.
0
0
Attacker Value
Unknown

CVE-2014-4778

Disclosure Date: May 25, 2015 (last updated October 05, 2023)
IBM License Metric Tool 9 before 9.1.0.2 and Endpoint Manager for Software Use Analysis 9 before 9.1.0.2 do not send an X-Frame-Options HTTP header in response to requests for the login page, which allows remote attackers to conduct clickjacking attacks via vectors involving a FRAME element.
0
0
Attacker Value
Unknown

CVE-2014-4774

Disclosure Date: May 25, 2015 (last updated October 05, 2023)
Cross-site request forgery (CSRF) vulnerability in the login page in IBM License Metric Tool 9 before 9.1.0.2 and Endpoint Manager for Software Use Analysis 9 before 9.1.0.2 allows remote attackers to hijack the authentication of arbitrary users via vectors involving a FRAME element.
0
0
Attacker Value
Unknown

CVE-2014-4776

Disclosure Date: May 20, 2015 (last updated October 05, 2023)
IBM License Metric Tool 9 before 9.1.0.2 does not have an off autocomplete attribute for authentication fields, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.
0
0