PT-2016-4151 · Ibm · Ibm Security Identity Manager Virtual Appliance

Publicado 2016-07-15 · Atualizado 2017-09-01 · CVE-2016-0330

Positive Technologies (AI Summary)

CVSS v3.1

7.3

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions IBM Security Identity Manager (ISIM) Virtual Appliance versions 7.0.0.0 through 7.0.1.1

Description The issue concerns the mishandling of password creation, making it easier for remote attackers to obtain access by leveraging an attack against the password algorithm.

Recommendations For IBM Security Identity Manager (ISIM) Virtual Appliance versions 7.0.0.0 through 7.0.1.1, apply the fix 7.0.1-ISS-SIM-FP0003 to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2016-0330

Produtos afetados

Ibm Security Identity Manager Virtual Appliance

Referências · 4

• http://www-01.ibm.com/support/docview.wss?uid=swg21985736 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2016-0330 · Aviso do Fabricante
• http://securitytracker.com/id/1036255 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-0330 · Nota de Segurança