Lucene search

K
ibmIBM9C877968AE5B33C55E09BCE8431211C214D8438DD0CA13612295AD9E5901244B
HistoryAug 04, 2021 - 5:51 p.m.

Security Bulletin: IBM Security Privileged Identity Manager is affected by a security vulnerability

2021-08-0417:51:11
www.ibm.com
9

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.017 Low

EPSS

Percentile

85.8%

Summary

IBM Security Privileged Identity Manager has addressed the following security vulnerability.

Vulnerability Details

CVEID:CVE-2016-3616
**DESCRIPTION:**cjpeg is vulnerable to a denial of service, caused by a NULL pointer dereference in the libjpeg library. By persuading a victim to open a specially crafted JPEG file, an attacker could exploit this vulnerability to cause a denial of service and possibly execute arbitrary code on the system.
CVSS Base score: 6.3
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/111866 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L)

Affected Products and Versions

Affected Product(s) Version(s)
ISPIM 2.1.1

Remediation/Fixes

Product VRMF Remediation
IBM Security Privileged Identity Manager 2.1.1 2.1.1-ISS-ISPIM-VA-FP0004

Workarounds and Mitigations

None

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.017 Low

EPSS

Percentile

85.8%