Skip to content
Sign in
Not rated

CVE-2016-9703 IBM Security Identity Manager Virtual Appliance does not invalidate session tokens which could allow an unauthorized…

Description

IBM Security Identity Manager Virtual Appliance does not invalidate session tokens which could allow an unauthorized user with physical access to the work station to obtain sensitive information.

Affected products and versions

Product Affected versions Fixed in
Identity Manager 7.0 No fix stated
Identity Manager 7 No fix stated
Identity Manager 6.0 No fix stated
Identity Manager 6 No fix stated
Identity Manager 5.1 No fix stated
Identity Manager 5.0 No fix stated

Other CVEs of Identity Manager

The 3 CVEs of Identity Manager →
CVE-2016-9704 IBM Security Identity Manager Virtual Appliance is vulnerable to cross-site scripting Not rated CVE-2016-9739 IBM Security Identity Manager Virtual Appliance stores user credentials in plain in clear text which can be read by a… Not rated
Track this CVE