CVE-2016-9739

EUVD-2016-10540
IBM Security Identity Manager Virtual Appliance stores user credentials in plain in clear text which can be read by a local user.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.8 HIGH
LOCAL
LOW
LOW
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 16%
Affected Products (NVD)
VendorProductVersion
ibmsecurity_identity_manager
7.0.0.0
ibmsecurity_identity_manager
7.0.0.1
ibmsecurity_identity_manager
7.0.0.2
ibmsecurity_identity_manager
7.0.0.3
ibmsecurity_identity_manager
7.0.1.0
ibmsecurity_identity_manager
7.0.1.1
ibmsecurity_identity_manager
7.0.1.2
ibmsecurity_identity_manager
7.0.1.3
ibmsecurity_identity_manager
7.0.1.4
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.ibm.com/support/docview.wss?uid=swg21996761
http://www.securityfocus.com/bid/95326
http://www.securitytracker.com/id/1037765
http://www.ibm.com/support/docview.wss?uid=swg21996761
http://www.securityfocus.com/bid/95326
http://www.securitytracker.com/id/1037765