CVE-2016-9703

Published: Feb 1, 2017Modified: May 13, 2026

2.4

Vector

CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 0.9 / Impact: 1.4

Source: NVD

Description

IBM Security Identity Manager Virtual Appliance does not invalidate session tokens which could allow an unauthorized user with physical access to the work station to obtain sensitive information.

Affected (9)

Products: Ibm: Security Identity Manager Virtual Appliance

Ibm

1 product

Security Identity Manager Virtual Appliance

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Ibm Security Identity Manager Virtual Appliance	Version 7.0.0.0
Ibm Security Identity Manager Virtual Appliance	Version 7.0.0.1
Ibm Security Identity Manager Virtual Appliance	Version 7.0.0.2
Ibm Security Identity Manager Virtual Appliance	Version 7.0.0.3
Ibm Security Identity Manager Virtual Appliance	Version 7.0.1.0
Ibm Security Identity Manager Virtual Appliance	Version 7.0.1.1
Ibm Security Identity Manager Virtual Appliance	Version 7.0.1.2
Ibm Security Identity Manager Virtual Appliance	Version 7.0.1.3
Ibm Security Identity Manager Virtual Appliance	Version 7.0.1.4