CVE-2016-9703

Опубликовано: 01 фев. 2017

Источник: nvd

CVSS3: 2.4

CVSS2: 2.1

EPSS Низкий

Описание

IBM Security Identity Manager Virtual Appliance does not invalidate session tokens which could allow an unauthorized user with physical access to the work station to obtain sensitive information.

Ссылки

http://www.ibm.com/support/docview.wss?uid=swg21996761
Patch
Vendor Advisory
http://www.securityfocus.com/bid/95327
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1037765
http://www.ibm.com/support/docview.wss?uid=swg21996761
Patch
Vendor Advisory
http://www.securityfocus.com/bid/95327
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1037765

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:security_identity_manager_virtual_appliance:7.0.0.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_identity_manager_virtual_appliance:7.0.0.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_identity_manager_virtual_appliance:7.0.0.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_identity_manager_virtual_appliance:7.0.0.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_identity_manager_virtual_appliance:7.0.1.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_identity_manager_virtual_appliance:7.0.1.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_identity_manager_virtual_appliance:7.0.1.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_identity_manager_virtual_appliance:7.0.1.3:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_identity_manager_virtual_appliance:7.0.1.4:*:*:*:*:*:*:*

EPSS

Процентиль: 20%

0.00063

Низкий

2.4 Low

CVSS3

2.1 Low

CVSS2

Дефекты

CWE-384

Связанные уязвимости

GHSA-p2w6-gcfr-rq8g