CVE-2016-0340

Published: Jul 15, 2016Modified: May 6, 2026

7.4

Vector

CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.4 / Impact: 5.9

Source: NVD

Description

IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 mishandles session expiration, which allows remote attackers to hijack sessions by leveraging an unattended workstation.

Affected (6)

Products: Ibm: Security Identity Manager Adapter

Ibm

1 product

Security Identity Manager Adapter

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Ibm Security Identity Manager Adapter	Version 7.0.0.0
Ibm Security Identity Manager Adapter	Version 7.0.0.1
Ibm Security Identity Manager Adapter	Version 7.0.0.2
Ibm Security Identity Manager Adapter	Version 7.0.0.3
Ibm Security Identity Manager Adapter	Version 7.0.1.0
Ibm Security Identity Manager Adapter	Version 7.0.1.1