CVE-2016-9703

published 2017-02-01

CVE-2016-9703: IBM Security Identity Manager Virtual Appliance does not invalidate session tokens which could allow an unauthorized user with physical access to the work…

Priority P4 5 low 2.4 CVSS 3.0

AV P AC L PR N UI N S U C L I N A N

IBM Security Identity Manager Virtual Appliance does not invalidate session tokens which could allow an unauthorized user with physical access to the work station to obtain sensitive information.

Affected

15 ranges

Vendor	Product	Version range	Fixed in
ibm	security_identity_manager_virtual_appliance	—	—
ibm	security_identity_manager_virtual_appliance	—	—
ibm	security_identity_manager_virtual_appliance	—	—
ibm	security_identity_manager_virtual_appliance	—	—
ibm	security_identity_manager_virtual_appliance	—	—
ibm	security_identity_manager_virtual_appliance	—	—
ibm	security_identity_manager_virtual_appliance	—	—
ibm	security_identity_manager_virtual_appliance	—	—
ibm	security_identity_manager_virtual_appliance	—	—
ibm_corporation	identity_manager	—	—
ibm_corporation	identity_manager	—	—
ibm_corporation	identity_manager	—	—
ibm_corporation	identity_manager	—	—
ibm_corporation	identity_manager	—	—
ibm_corporation	identity_manager	—	—

CVSS provenance

nvd v3.0 2.4 LOW CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

nvd v2.0 2.1 LOW AV:L/AC:L/Au:N/C:P/I:N/A:N

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-384