3 results (0.004 seconds)

CVSS: 5.3EPSS: 0%CPEs: 1EXPL: 0

CVE-2018-1968

https://notcve.org/view.php?id=CVE-2018-1968

11 Jul 2019 — IBM Security Identity Manager 7.0.1 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 153749. Security Identity Manager versión 7.0.1 de IBM, revela información confidencial a usuarios no autorizados. La información puede ser utilizada para montar nuevos ataques sobre el sistema. • http://www.ibm.com/support/docview.wss?uid=ibm10958077 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 2.4EPSS: 0%CPEs: 9EXPL: 0

CVE-2016-9703

https://notcve.org/view.php?id=CVE-2016-9703

01 Feb 2017 — IBM Security Identity Manager Virtual Appliance does not invalidate session tokens which could allow an unauthorized user with physical access to the work station to obtain sensitive information. IBM Security Identity Manager Virtual Appliance no invalida los tokens de sesión que podrían permitir que un usuario no autorizado con acceso físico a la estación de trabajo obtenga información sensible. • http://www.ibm.com/support/docview.wss?uid=swg21996761 • CWE-384: Session Fixation •

CVSS: 6.1EPSS: 0%CPEs: 9EXPL: 0

CVE-2016-9704

https://notcve.org/view.php?id=CVE-2016-9704

01 Feb 2017 — IBM Security Identity Manager Virtual Appliance is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM Security Identity Manager Virtual Appliance es vulnerable a las secuencias de comandos de sitios cruzados. Esta vulnerabilidad permite a usuarios incrustar código JavaScript arbitrario en la IU Web alterando así la funcionalida... • http://www.ibm.com/support/docview.wss?uid=swg21996761 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •