Not rated
CVE-2016-5959 IBM Security Privileged Identity Manager 2.0.2 and 2.1.0 stores sensitive information in URL parameters
Description
IBM Security Privileged Identity Manager 2.0.2 and 2.1.0 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 116136.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Security Privileged Identity Manager | 2.1.0 | No fix stated |
| Security Privileged Identity Manager | 2.0.2 | No fix stated |
Other CVEs of Security Privileged Identity Manager
The 10 CVEs of Security Privileged Identity Manager →
CVE-2018-1618
IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 could allow a remote attacker to traverse directories…
7.7
High
CVE-2018-1622
IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 is vulnerable to cross-site request forgery which could…
4.3
Medium
CVE-2018-1623
IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 allows web pages to be stored locally which can be read…
4.0
Medium
CVE-2018-1625
IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 generates an error message that includes sensitive…
4.3
Medium