CVE-2014-3051

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-10-29 · updated 2026-06-17
Weakness: CWE-310

Description

The Internet Service Monitor (ISM) agent in IBM Tivoli Composite Application Manager (ITCAM) for Transactions 7.1 and 7.2 before 7.2.0.3 IF28, 7.3 before 7.3.0.1 IF30, and 7.4 before 7.4.0.0 IF18 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain credential information via a crafted certificate.

Affected products

IBM Tivoli Composite Application Manager For Transactions: 7.1.0.0, 7.1.0.1, 7.1.0.2, 7.1.0.3, 7.1.0.4, 7.2.0.0 (+3)

References

http://secunia.com/advisories/59756
http://www-01.ibm.com/support/docview.wss?uid=swg21682290
https://exchange.xforce.ibmcloud.com/vulnerabilities/93444
http://secunia.com/advisories/59756
http://www-01.ibm.com/support/docview.wss?uid=swg21682290
https://exchange.xforce.ibmcloud.com/vulnerabilities/93444

Get alerted when CVE-2014-3051 or the next vulnerability affects your stack