PT-2016-6735

CVE-2016-5963

·

Published

2016-09-26

·

Updated

2016-11-28

Description by

CVSS 3.1
8.8
High
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions IBM Security Privileged Identity Manager (ISPIM) Virtual Appliance versions 2.0.0 through 2.0.2 FP7
Description The issue is related to improper validation of updates, allowing remote authenticated users to execute arbitrary code.
Recommendations For versions 2.0.0 through 2.0.2 FP7, update to version 2.0.2 FP8 to resolve the issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-284: Improper Access Control
Related identifiers
CVE-2016-5963
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com