CVE-2016-0332

Published: Jan 12, 2018Modified: Nov 21, 2024

9.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.0 before 7.0.1-ISS-SIM-FP0001 do not properly restrict failed login attempts, which makes it easier for remote attackers to obtain access via a brute-force approach. IBM X-Force ID: 111695.

Affected (5)

Products: Ibm: Security Identity Manager Virtual Appliance

Ibm

1 product

Security Identity Manager Virtual Appliance

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Ibm Security Identity Manager Virtual Appliance	Version 7.0.0.0
Ibm Security Identity Manager Virtual Appliance	Version 7.0.0.1
Ibm Security Identity Manager Virtual Appliance	Version 7.0.0.2
Ibm Security Identity Manager Virtual Appliance	Version 7.0.0.3
Ibm Security Identity Manager Virtual Appliance	Version 7.0.1.0

Related CWEs

CWE-254

References (4)

http://www-01.ibm.com/support/docview.wss?uid=swg21981438

Source: psirt@us.ibm.com

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/111695

Source: psirt@us.ibm.com

VDB EntryVendor Advisory

http://www-01.ibm.com/support/docview.wss?uid=swg21981438

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/111695

Source: af854a3a-2127-422b-91ae-364da2661108

VDB EntryVendor Advisory

Timeline

No history available yet.