CVE Vulnerabilities

CVE-2016-0330

Published: Jul 15, 2016 | Modified: Apr 12, 2025
CVSS 3.x
7.3
HIGH
Source:
NVD
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 mishandles password creation, which makes it easier for remote attackers to obtain access by leveraging an attack against the password algorithm.

Affected Software

NameVendorStart VersionEnd Version
Security_identity_manager_adapterIbm7.0.0.0 (including)7.0.0.0 (including)
Security_identity_manager_adapterIbm7.0.0.1 (including)7.0.0.1 (including)
Security_identity_manager_adapterIbm7.0.0.2 (including)7.0.0.2 (including)
Security_identity_manager_adapterIbm7.0.0.3 (including)7.0.0.3 (including)
Security_identity_manager_adapterIbm7.0.1.0 (including)7.0.1.0 (including)
Security_identity_manager_adapterIbm7.0.1.1 (including)7.0.1.1 (including)

References