Security Privileged Identity Manager Security Vulnerabilities and Issues — Security Privileged Identity Manager CVE List

Lucene search

IbmSecurity Privileged Identity Manager

3 matches found

CVE•added 2017/02/01 8:59 p.m.•51 views

CVE-2016-5958

IBM Security Privileged Identity Manager could allow a remote attacker to obtain sensitive information, caused by the failure to set the secure flag for the session cookie in SSL mode. By intercepting its transmission within an HTTP session, an attacker could exploit this vulnerability to capture t...

7.5CVSS7.3AI score0.00254EPSS

CVE•added 2019/04/02 2:29 p.m.•48 views

CVE-2018-1618

IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 144343.

7.7CVSS7.4AI score0.00462EPSS

CVE•added 2019/04/02 2:29 p.m.•37 views

CVE-2018-1680

IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 145236.

7.5CVSS7.4AI score0.00245EPSS