CVE-2016-5963

Published: Sep 26, 2016Modified: May 6, 2026

8.8

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

IBM Security Privileged Identity Manager (ISPIM) Virtual Appliance 2.x before 2.0.2 FP8 does not properly validate updates, which allows remote authenticated users to execute arbitrary code via unspecified vectors.

Affected (1)

Products: Ibm: Security Privileged Identity Manager Virtual Appliance

Ibm

1 product

Security Privileged Identity Manager Virtual Appliance

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Ibm Security Privileged Identity Manager Virtual Appliance	Version 2.0

Related CWEs

CWE-284

Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (4)

http://www-01.ibm.com/support/docview.wss?uid=swg21989205

Source: psirt@us.ibm.com

PatchVendor Advisory

http://www.securityfocus.com/bid/93076

Source: psirt@us.ibm.com

http://www-01.ibm.com/support/docview.wss?uid=swg21989205

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.securityfocus.com/bid/93076

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.