Not rated
CVE-2016-5966 IBM Security Privileged Identity Manager Virtual Appliance could allow a remote attacker to obtain sensitive…
Description
IBM Security Privileged Identity Manager Virtual Appliance could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Privileged Identity Manager | 2.1.0 | No fix stated |
| Privileged Identity Manager 2.0 | 2.0.0 → 2.0.2 | No fix stated |
| Privileged Identity Manager 1.0 | 1.0.1 → 1.0.1.1 | No fix stated |
Other CVEs of Privileged Identity Manager
The 5 CVEs of Privileged Identity Manager →
CVE-2016-5958
IBM Security Privileged Identity Manager could allow a remote attacker to obtain sensitive information, caused by the…
Not rated
CVE-2016-5964
IBM Security Privileged Identity Manager Virtual Appliance version 2.0.2 uses an inadequate account lockout setting that…
Not rated
CVE-2016-5988
IBM Security Privileged Identity Manager Virtual Appliance could disclose sensitive information in generated error…
Not rated
CVE-2016-5990
IBM Security Privileged Identity Manager Virtual Appliance allows an authenticated user to upload malicious files that…
Not rated