PT-2016-6734 · Ibm · Ibm Security Privileged Identity Manager Virtual Appliance

Publicado 2016-09-26 · Atualizado 2016-11-28 · CVE-2016-5957

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Security Privileged Identity Manager (ISPIM) Virtual Appliance versions 2.0.0 through 2.0.2 before FP8

Description The issue allows remote attackers to defeat cryptographic protection mechanisms and obtain sensitive information by leveraging a weak algorithm.

Recommendations For versions 2.0.0 through 2.0.2 before FP8, update to version 2.0.2 FP8 to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-310

Identificadores relacionados

CVE-2016-5957

Produtos afetados

Ibm Security Privileged Identity Manager Virtual Appliance

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2016-5957 · Nota de Segurança
• http://www-01.ibm.com/support/docview.wss?uid=swg21989205 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2016-5957 · Aviso do Fabricante
• http://securityfocus.com/bid/93083 · Nota