Non notée
CVE-2016-5959 IBM Security Privileged Identity Manager 2.0.2 and 2.1.0 stores sensitive information in URL parameters
Description
IBM Security Privileged Identity Manager 2.0.2 and 2.1.0 stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 116136.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Security Privileged Identity Manager | 2.1.0 | Pas de correctif indiqué |
| Security Privileged Identity Manager | 2.0.2 | Pas de correctif indiqué |
Autres CVE de Security Privileged Identity Manager
Les 10 CVE de Security Privileged Identity Manager →
CVE-2018-1618
IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 could allow a remote attacker to traverse directories…
7.7
Élevée
CVE-2018-1622
IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 is vulnerable to cross-site request forgery which could…
4.3
Moyenne
CVE-2018-1623
IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 allows web pages to be stored locally which can be read…
4.0
Moyenne
CVE-2018-1625
IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 generates an error message that includes sensitive…
4.3
Moyenne