CVE-2016-5972

MEDIUM

IBM Security Privileged Identity Manager (ISPIM) Virtual Appliance ...

Title source: llm

Description

IBM Security Privileged Identity Manager (ISPIM) Virtual Appliance 2.x before 2.0.2 FP8 uses weak permissions for unspecified resources, which allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors.

References (2)

Core 2

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/93077

Patch, Vendor Advisory x_refsource_confirm

http://www-01.ibm.com/support/docview.wss?uid=swg21989205

Scores

CVSS v3 6.8

EPSS 0.0076

EPSS Percentile 50.6%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

Details

CWE

CWE-200 CWE-284

Status published

Products (1)

ibm/security_privileged_identity_manager_virtual_appliance < 2.0.2

Published Sep 26, 2016

Tracked Since Feb 18, 2026