CVE-2016-0340

CWE-284 — Improper Access Control3 documents3 sources
Severity
7.4HIGH
EPSS
0.2%
top 58.09%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Security Identity Manager Adapter
Timeline
PublishedJul 15
Latest updateMay 17

Description

IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 mishandles session expiration, which allows remote attackers to hijack sessions by leveraging an unattended workstation.

CVSS vector

CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 1.4 | Impact: 5.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-2fpx-8j38-3gp6: IBM Security Identity Manager (ISIM) Virtual Appliance 7↗2022-05-17
▶
CVEList
CVE-2016-0340: IBM Security Identity Manager (ISIM) Virtual Appliance 7↗2016-07-15
▶
CVE-2016-0340 (HIGH CVSS 7.4) | IBM Security Identity Manager (ISIM | cvebase.io