CVE-2016-0332

published 2018-01-12

CVE-2016-0332: IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.0 before 7.0.1-ISS-SIM-FP0001 do not properly restrict failed login attempts…

critical 9.8 CVSS 3.0

AV N AC L PR N UI N S U C H I H A H

IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.0 before 7.0.1-ISS-SIM-FP0001 do not properly restrict failed login attempts, which makes it easier for remote attackers to obtain access via a brute-force approach. IBM X-Force ID: 111695.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
ibm	security_identity_manager_virtual_appliance	—	—
ibm	security_identity_manager_virtual_appliance	—	—
ibm	security_identity_manager_virtual_appliance	—	—
ibm	security_identity_manager_virtual_appliance	—	—
ibm	security_identity_manager_virtual_appliance	—	—

CWE-254