CVE-2016-5958

IBM Security Privileged Identity Manager could allow a remote attacker to obtain sensitive information, caused by the failure to set the secure flag for the session cookie in SSL mode. By intercepting its transmission within an HTTP session, an attacker could exploit this vulnerability to capture...

CVE-2016-5988

CVE-2016-5988 affects IBM Security Privileged Identity Manager Virtual Appliance. Impact: authenticated users can obtain sensitive information via disclosing content in generated error messages. Affected versions: IBM Security Privileged Identity Manager 2.0.2 and 2.1. Remediation/fix: ISPIM 2.0....

CVE-2016-5988

IBM Security Privileged Identity Manager Virtual Appliance could disclose sensitive information in generated error messages that would be available to an authenticated user...

IBM Security Identity Manager Virtual Appliance Cross-Site Scripting Vulnerability (CNVD-2017-00457)

IBM Security Identity Manager ISIM is a suite of identity management and governance solutions from IBM in the United States. A cross-site scripting vulnerability exists in the IBM Security Identity Manager Virtual Appliance. An attacker can exploit this vulnerability to inject arbitrary JavaScrip...

IBM Security Identity Manager Virtual Appliance Local Information Disclosure Vulnerability

IBM Security Privileged Identity Manager is an enterprise identity management security solution. The IBM Security Identity Manager Virtual Appliance does not properly log out of session tokens, which can allow unauthorized users to gain access to sensitive workstation information...

IBM Security Identity Manager Local Information Disclosure Vulnerability

IBM Security Privileged Identity Manager is an enterprise identity management security solution. The IBM Security Identity Manager Virtual Appliance stores user credentials in plain text, enabling local users to access sensitive information...

A hotfix rollup package (build 4.1.3419.0) is available for Forefront Identity Manager 2010 R2

A hotfix rollup package build 4.1.3419.0 is available for Forefront Identity Manager 2010 R2 Introduction A hotfix rollup package build 4.1.3419.0 is available for Microsoft Forefront Identity Manager FIM 2010 R2. This hotfix rollup package resolves some issues that are described in the "More...

IBM Security Privileged Identity Manager Information Disclosure Vulnerability (CNVD-2017-00195)

IBM Security Privileged Identity Manager is an identity management product within IBM Identity Governance and Management, an identity governance solution from IBM in the U.S. It is used to protect, automate, and audit the use of privileged identities to help defend against insider threats and...

IBM Security Privileged Identity Manager Arbitrary File Upload Vulnerability

IBM Security Privileged Identity Manager is an identity management product within IBM Identity Governance and Management, an identity governance solution from IBM USA, that protects, automates, and audits the use of privileged identities to help defend against insider threats and improve security...

IBM Security Privileged Identity Manager Information Disclosure Vulnerability (CNVD-2017-00196)

IBM Security Privileged Identity Manager is an identity management product within IBM Identity Governance and Management, an identity governance solution from IBM USA, that protects, automates, and audits the use of privileged identities to help defend against insider threats and improve security...

IBM Security Privileged Identity Manager Information Disclosure Vulnerability

IBM Security Privileged Identity Manager is an identity management product within IBM Identity Governance and Management, an identity governance solution from IBM USA, that protects, automates, and audits the use of privileged identities to help defend against insider threats and improve security...

Design/Logic Flaw

VMware Identity Manager 2.x before 2.7.1 and vRealize Automation 7.x before 7.2.0 allow remote attackers to read /SAAS/WEB-INF and /SAAS/META-INF files via unspecified vectors...

CVE-2016-5334

VMware Identity Manager 2.x before 2.7.1 and vRealize Automation 7.x before 7.2.0 allow remote attackers to read /SAAS/WEB-INF and /SAAS/META-INF files via unspecified vectors...

CVE-2016-5334

VMware Identity Manager 2.x before 2.7.1 and vRealize Automation 7.x before 7.2.0 allow remote attackers to read /SAAS/WEB-INF and /SAAS/META-INF files via unspecified vectors...

CVE-2016-5334

CVE-2016-5334 affects VMware Identity Manager 2.x < 2.7.1 and vRealize Automation 7.x

CVE-2016-5334

VMware Identity Manager 2.x before 2.7.1 and vRealize Automation 7.x before 7.2.0 allow remote attackers to read /SAAS/WEB-INF and /SAAS/META-INF files via unspecified vectors...

VMware Identity Manager and vRealize Automation Information Disclosure Vulnerability

VMware Identity Manager and vRealize Automation are both VMware products. vMware Identity Manager is an Identity-as-a-Service IDaaS product that provides application provisioning, self-service catalogs, and Single Sign-On SSO for SaaS, Web, Cloud, and native mobile applications. vMware vRealize...

CVE-2016-2996

IBM Security Privileged Identity Manager 2.0 before 2.0.2 FP8, when Virtual Appliance is used, allows remote authenticated users to append to arbitrary files via unspecified vectors...

CVE-2016-2996

IBM Security Privileged Identity Manager 2.0 before 2.0.2 FP8, when Virtual Appliance is used, allows remote authenticated users to append to arbitrary files via unspecified vectors...

CVE-2016-0353

IBM Security Privileged Identity Manager 2.0 before 2.0.2 FP8, when Virtual Appliance is used, does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...