CVE-2016-5988

CWE-200 — Information Exposure3 documents3 sources

Severity

6.5MEDIUM

EPSS

0.3%

top 51.48%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

IBM Corporation Privileged Identity Manager IBM Security Privileged Identity Manager

Timeline

PublishedFeb 1

Latest updateMay 17

Description

IBM Security Privileged Identity Manager Virtual Appliance could disclose sensitive information in generated error messages that would be available to an authenticated user.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 2.8 | Impact: 3.6

Affected Packages2 packages

▶NVDibm/security_privileged_identity_manager2.0.2, 2.1+1

▶CVEListV5ibm_corporation/privileged_identity_manager6 versions+5

Patches

Patch: www.ibm.com ↗Patch: www.ibm.com ↗

🔴Vulnerability Details

GHSA

GHSA-hv65-hmj5-p9wh: IBM Security Privileged Identity Manager Virtual Appliance could disclose sensitive information in generated error messages that would be available to↗2022-05-17

▶

CVEList

CVE-2016-5988: IBM Security Privileged Identity Manager Virtual Appliance could disclose sensitive information in generated error messages that would be available to↗2017-02-01

▶