2959 matches found
CVE-2016-0353
IBM Security Privileged Identity Manager 2.0 before 2.0.2 FP8, when Virtual Appliance is used, does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...
CVE-2016-0353
IBM Security Privileged Identity Manager 2.0 before 2.0.2 FP8, when Virtual Appliance is used, does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...
CVE-2016-2996
IBM Security Privileged Identity Manager 2.0 before 2.0.2 FP8, when Virtual Appliance is used, allows remote authenticated users to append to arbitrary files via unspecified vectors...
Session fixation
IBM Security Privileged Identity Manager 2.0 before 2.0.2 FP8, when Virtual Appliance is used, does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...
Code injection
IBM Security Privileged Identity Manager 2.0 before 2.0.2 FP8, when Virtual Appliance is used, allows remote authenticated users to append to arbitrary files via unspecified vectors...
CVE-2016-2996
CVE-2016-2996 concerns IBM Security Privileged Identity Manager 2.0, specifically the Virtual Appliance. An authenticated remote user could modify the system by appending lines to arbitrary files due to an input validation error. The issue is documented in IBM Security Privileged Identity Manager...
CVE-2016-0353
IBM Security Privileged Identity Manager 2.0 before 2.0.2 FP8, when Virtual Appliance is used, does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...
CVE-2016-0353
CVE-2016-0353 affects IBM Security Privileged Identity Manager Virtual Appliance 2.0 prior to 2.0.2 FP8. The root cause is that the session cookie was not marked as Secure in SSL, allowing interception when transmitted over HTTPS/HTTP in a mixed context and potentially enabling cookie theft. The ...
CVE-2016-2996
IBM Security Privileged Identity Manager 2.0 before 2.0.2 FP8, when Virtual Appliance is used, allows remote authenticated users to append to arbitrary files via unspecified vectors...
CVE-2016-2996: Improper Input Validation
IBM Security Privileged Identity Manager 2.0 before 2.0.2 FP8, when Virtual Appliance is used, allows remote authenticated users to append to arbitrary files via unspecified vectors...
CVE-2016-0353: Exposure of Sensitive Information to an Unauthorized Actor
IBM Security Privileged Identity Manager 2.0 before 2.0.2 FP8, when Virtual Appliance is used, does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session...
PT-2016-5317
Name of the Vulnerable Software and Affected Versions IBM Security Privileged Identity Manager version 2.0 before 2.0.2 FP8 Description The issue allows remote authenticated users to append to arbitrary files. This can be achieved via unspecified vectors when the Virtual Appliance is used...
PT-2016-4159
Name of the Vulnerable Software and Affected Versions IBM Security Privileged Identity Manager version 2.0 before 2.0.2 FP8 Description The issue allows remote attackers to capture session cookies by intercepting their transmission within an http session, as the secure flag for the session cookie...
VMware vRealize Automation Partial Information Disclosure Vulnerability (VMSA-2016-0021)
There is a partial information disclosure vulnerability in VMware Identity Manager as used by vRealize Automation. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
VMSA-2016-0021:VMware product updates address partial information disclosure vulnerability
VMSA-2016-0021 VMware product updates address partial information disclosure vulnerability VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2016-0021 VMware Security Advisory Severity: Moderate VMware Security Advisory Synopsis: VMware product updates address partial informatio...
IBM Security Privileged Identity Manager Authentication Bypass Vulnerability
IBM Security Privileged Identity Manager is an identity management product within IBM Identity Governance and Management, an identity governance solution from IBM USA, that protects, automates, and audits the use of privileged identities to help defend against insider threats and improve security...
Novell NetIQ Identity Manager HTML Injection Vulnerability (CNVD-2016-10657)
NetIQ Designer for Identity Manager is a suite of graphical interface tools for configuring and deploying Identity Manager, a comprehensive solution for providing identity and control access, from NetIQ USA. An HTML injection vulnerability exists in Novell NetIQ Identity Manager. An attacker coul...
Novell NetIQ Identity Manager Cross-Site Scripting Vulnerability
NetIQ Designer for Identity Manager is a suite of graphical interface tools for configuring and deploying Identity Manager, a comprehensive solution for providing identity and control access, from NetIQ USA. A cross-site scripting vulnerability exists in Novell NetIQ Identity Manager. As the...
Novell NetIQ Identity Manager HTML Injection Vulnerability
NetIQ Designer for Identity Manager is a suite of graphical interface tools for configuring and deploying Identity Manager, a comprehensive solution for providing identity and control access, from NetIQ USA. An html injection vulnerability exists in Novell NetIQ Identity Manager versions prior to...