PT-2016-4155 · Ibm · Ibm Security Identity Manager Virtual Appliance

Publicado 2016-07-15 · Atualizado 2017-09-01 · CVE-2016-0340

Positive Technologies (AI Summary)

CVSS v3.1

7.4

Alta

Vetor base

AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM Security Identity Manager (ISIM) Virtual Appliance versions 7.0.0.0 through 7.0.1.1

Description The issue is related to the mishandling of session expiration, which can be exploited by remote attackers to hijack sessions. This can occur when an attacker leverages an unattended workstation.

Recommendations For IBM Security Identity Manager (ISIM) Virtual Appliance versions 7.0.0.0 through 7.0.1.1, apply the fix 7.0.1-ISS-SIM-FP0003 to resolve the issue.

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

CVE-2016-0340

Produtos afetados

Ibm Security Identity Manager Virtual Appliance

Referências · 5

• http://securityfocus.com/bid/91692 · Nota
• http://securitytracker.com/id/1036255 · Nota
• https://osv.dev/vulnerability/CVE-2016-0340 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=swg21985736 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-0340 · Nota de Segurança