CVE-2016-3040

MEDIUM

IBM Security Privileged Identity Manager Virtual Appliance 2.x - Authenticated Open Redirect

Title source: llm

Description

IBM WebSphere Application Server (WAS) Liberty, as used in IBM Security Privileged Identity Manager (ISPIM) Virtual Appliance 2.x before 2.0.2 FP8, allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

References (2)

Core 2

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/92986

Patch, Vendor Advisory x_refsource_confirm

http://www-01.ibm.com/support/docview.wss?uid=swg21989205

Scores

CVSS v3 6.8

EPSS 0.0105

EPSS Percentile 59.8%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N

Details

CWE

CWE-601

Status published

Products (1)

ibm/security_privileged_identity_manager_virtual_appliance 2.0

Published Sep 26, 2016

Tracked Since Feb 18, 2026