CVE-2016-0339

Published: Jul 15, 2016Modified: May 6, 2026

5.6

Vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

Exploitability: 2.2 / Impact: 3.4

Source: NVD

Description

IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 mishandles session identifiers after logout, which makes it easier for remote attackers to spoof users by leveraging knowledge of "traffic records."

Affected (6)

Products: Ibm: Security Identity Manager Adapter

Ibm

1 product

Security Identity Manager Adapter

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Ibm Security Identity Manager Adapter	Version 7.0.0.0
Ibm Security Identity Manager Adapter	Version 7.0.0.1
Ibm Security Identity Manager Adapter	Version 7.0.0.2
Ibm Security Identity Manager Adapter	Version 7.0.0.3
Ibm Security Identity Manager Adapter	Version 7.0.1.0
Ibm Security Identity Manager Adapter	Version 7.0.1.1