CVE-2016-5990

MEDIUM

IBM Security Privileged Identity Manager Virtual Appliance - Code I...

Title source: llm
STIX 2.1

Description

IBM Security Privileged Identity Manager Virtual Appliance allows an authenticated user to upload malicious files that would be automatically executed by the server.

References (2)

Core 2
Core References
Patch, Vendor Advisory x_refsource_confirm
http://www.ibm.com/support/docview.wss?uid=swg21996614
Patch, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/95199

Scores

CVSS v3 6.3
EPSS 0.0019
EPSS Percentile 40.9%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Details

CWE
CWE-284
Status published
Products (8)
ibm/security_privileged_identity_manager 2.0.2
ibm/security_privileged_identity_manager 2.1
IBM Corporation/Privileged Identity Manager 1.0.1
IBM Corporation/Privileged Identity Manager 1.0.1.1
IBM Corporation/Privileged Identity Manager 2.0.0
IBM Corporation/Privileged Identity Manager 2.0.1
IBM Corporation/Privileged Identity Manager 2.0.2
IBM Corporation/Privileged Identity Manager 2.1.0
Published Feb 01, 2017
Tracked Since Feb 18, 2026