CVE-2016-0366

CVE-2016-0366 affects IBM Security Identity Manager Virtual Appliance; the risk is due to weak encryption that could allow a remote attacker to obtain sensitive information via a MITM scenario. The IBM Security Privileged Identity Manager/ISPIM 2.0 family is affected, with IBM’s bulletin noting t...

CVE-2016-0367

Summary of CVE-2016-0367 (IBM ISIM Virtual Appliance): Affected IBM Security Identity Manager Virtual Appliance 7.0.x before 7.0.1.3-ISS-SIM-IF0001 exposes sensitive information via an error message that can be read by an authenticated remote user, enabling information disclosure. Affected produc...

CVE-2016-0367

IBM Security Identity Manager Virtual Appliance 7.0.x before 7.0.1.3-ISS-SIM-IF0001 allows remote authenticated users to obtain sensitive information by reading an error message. IBM X-Force ID: 112072...

CVE-2016-0351

CVE-2016-0351 affects IBM Security Identity Manager Virtual Appliance 7.0.x prior to 7.0.1.3-ISS-SIM-IF0001, where the session cookie in HTTPS does not set the secure flag, enabling cookie capture over HTTP. The IBM bulletin confirms multiple vulnerabilities and provides fixes for ISIM Virtual Ap...

CVE-2016-0351: Exposure of Sensitive Information to an Unauthorized Actor

IBM Security Identity Manager Virtual Appliance 7.0.x before 7.0.1.3-ISS-SIM-IF0001 does not set the secure flag for the session cookie in an HTTPS session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an HTTP session. IBM X-Force ID:...

CVE-2016-0366: Exposure of Sensitive Information to an Unauthorized Actor

IBM Security Identity Manager Virtual Appliance 7.0.x before 7.0.1.3-ISS-SIM-IF0001 might allow remote attackers to obtain sensitive information by leveraging weak encryption. IBM X-Force ID: 112071...

PT-2018-4621

Name of the Vulnerable Software and Affected Versions IBM Security Identity Manager Virtual Appliance version 7.0.x before 7.0.1.3-ISS-SIM-IF0001 Description The issue allows remote authenticated users to obtain sensitive information by reading an error message. Recommendations For IBM Security...

PT-2018-4619

Name of the Vulnerable Software and Affected Versions IBM Security Identity Manager Virtual Appliance versions 7.0.x before 7.0.1.3-ISS-SIM-IF0001 Description The issue makes it easier for remote attackers to capture session cookies by intercepting their transmission within an HTTP session, as th...

CVE-2016-0367: Exposure of Sensitive Information to an Unauthorized Actor

IBM Security Identity Manager Virtual Appliance 7.0.x before 7.0.1.3-ISS-SIM-IF0001 allows remote authenticated users to obtain sensitive information by reading an error message. IBM X-Force ID: 112072...

PT-2018-4620

Name of the Vulnerable Software and Affected Versions IBM Security Identity Manager Virtual Appliance versions 7.0.x before 7.0.1.3-ISS-SIM-IF0001 Description The issue allows remote attackers to obtain sensitive information by leveraging weak encryption. Recommendations For IBM Security Identity...

Microsoft Identity Manager XSS Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Microsoft Identity Manager 2016 SP1 Service and Portal does not properly sanitize a specially crafted attribute value being displayed to a user on an affected MIM 2016 server. An attacker could exploit the vulnerability by sending a specially...

Microsoft Teams help & learning

None None...

KLA11230 ACE vulnerability in Microsoft System Center product

An unspecified vulnerability was found in Microsoft Identity Manager 2016 Service Pack 1. By exploiting this vulnerability malicious users can perform cross-site scripting attacks and execute arbitrary code. This vulnerability can be exploited remotely via a specially crafted attribute value...

Oracle Identity Manager Multiple Vulnerabilities (January 2018 CPU)

The remote host is missing the January 2018 Critical Patch Update for Oracle Identity Manager. It is, therefore, affected by multiple vulnerabilities as described in the January 2018 critical patch update advisory. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

CVE-2016-0327

IBM Security Identity Manager ISIM Virtual Appliance 7.0.0.0 through 7.0.1.0 before 7.0.1-ISS-SIM-FP0001 allows local users to gain administrator privileges via unspecified vectors. IBM X-Force ID: 111643...

CVE-2016-0336

Cross-site scripting XSS vulnerability in IBM Security Identity Manager ISIM Virtual Appliance 7.0.0.0 through 7.0.1.0 before 7.0.1-ISS-SIM-FP0001 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. IBM X-Force ID: 111737...

CVE-2016-0332

IBM Security Identity Manager ISIM Virtual Appliance 7.0.0.0 through 7.0.1.0 before 7.0.1-ISS-SIM-FP0001 do not properly restrict failed login attempts, which makes it easier for remote attackers to obtain access via a brute-force approach. IBM X-Force ID: 111695...

CVE-2016-0324

IBM Security Identity Manager ISIM Virtual Appliance 7.0.0.0 through 7.0.1.0 before 7.0.1-ISS-SIM-FP0001 allows remote authenticated users to execute arbitrary code with administrator privileges via unspecified vectors. IBM X-Force ID: 111640...

CVE-2016-0335

Cross-site request forgery CSRF vulnerability in IBM Security Identity Manager ISIM Virtual Appliance 7.0.0.0 through 7.0.1.0 before 7.0.1-ISS-SIM-FP0001 allows remote attackers to hijack the authentication of users for requests that have unspecified impact via unknown vectors. IBM X-Force ID:...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in IBM Security Identity Manager ISIM Virtual Appliance 7.0.0.0 through 7.0.1.0 before 7.0.1-ISS-SIM-FP0001 allows remote attackers to hijack the authentication of users for requests that have unspecified impact via unknown vectors. IBM X-Force ID:...