PT-2018-4612 · Ibm · Ibm Security Identity Manager Virtual Appliance
CVE-2016-0335
·
Published
2018-01-12
·
Updated
2018-01-29
CVSS v3.1
8.8
High
| Vector | AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
IBM Security Identity Manager (ISIM) Virtual Appliance versions 7.0.0.0 through 7.0.1.0
Description
A cross-site request forgery (CSRF) issue allows remote attackers to hijack the authentication of users for requests with unspecified impact. The attack vector is unknown.
Recommendations
For IBM Security Identity Manager (ISIM) Virtual Appliance versions 7.0.0.0 through 7.0.1.0, apply the fix 7.0.1-ISS-SIM-FP0001 to resolve the issue.
Fix
CSRF
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Ibm Security Identity Manager Virtual Appliance