Vulnerability Details CVE-2016-9703
IBM Security Identity Manager Virtual Appliance does not invalidate session tokens which could allow an unauthorized user with physical access to the work station to obtain sensitive information.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 19.8%
CVSS Severity
CVSS v3 Score 2.4
CVSS v2 Score 2.1
References
Products affected by CVE-2016-9703
-
cpe:2.3:a:ibm:security_identity_manager_virtual_appliance:7.0.0.0
-
cpe:2.3:a:ibm:security_identity_manager_virtual_appliance:7.0.0.1
-
cpe:2.3:a:ibm:security_identity_manager_virtual_appliance:7.0.0.2
-
cpe:2.3:a:ibm:security_identity_manager_virtual_appliance:7.0.0.3
-
cpe:2.3:a:ibm:security_identity_manager_virtual_appliance:7.0.1.0
-
cpe:2.3:a:ibm:security_identity_manager_virtual_appliance:7.0.1.1
-
cpe:2.3:a:ibm:security_identity_manager_virtual_appliance:7.0.1.2
-
cpe:2.3:a:ibm:security_identity_manager_virtual_appliance:7.0.1.3
-
cpe:2.3:a:ibm:security_identity_manager_virtual_appliance:7.0.1.4