cbcvebase.
CVE-2016-9703
published 2017-02-01

CVE-2016-9703: IBM Security Identity Manager Virtual Appliance does not invalidate session tokens which could allow an unauthorized user with physical access to the work…

low2.4CVSS 3.0
AVPACLPRNUINSUCLINAN
IBM Security Identity Manager Virtual Appliance does not invalidate session tokens which could allow an unauthorized user with physical access to the work station to obtain sensitive information.

Affected

15 ranges
VendorProductVersion rangeFixed in
ibmsecurity_identity_manager_virtual_appliance
ibmsecurity_identity_manager_virtual_appliance
ibmsecurity_identity_manager_virtual_appliance
ibmsecurity_identity_manager_virtual_appliance
ibmsecurity_identity_manager_virtual_appliance
ibmsecurity_identity_manager_virtual_appliance
ibmsecurity_identity_manager_virtual_appliance
ibmsecurity_identity_manager_virtual_appliance
ibmsecurity_identity_manager_virtual_appliance
ibm_corporationidentity_manager
ibm_corporationidentity_manager
ibm_corporationidentity_manager
ibm_corporationidentity_manager
ibm_corporationidentity_manager
ibm_corporationidentity_manager