Privileged Identity Manager

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:ibm_corporation:privileged_identity_manager:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorIbm Corporation (d12a6641-f3f1-52ca-aee3-0e264bbe9c89)
ProductPrivileged Identity Manager (bc7f73d7-6ed3-5f1d-8313-9d8a3aeba9c1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-5990 vulnerable 2026-06-08 05:07:58.345369 Details available
IBM Security Privileged Identity Manager Virtual Appliance allows an authenticated user to upload malicious files that would be automatically executed by the server.
Published: 2017-02-01T20:00:00.000Z
Updated: 2024-08-06T01:15:10.834Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5988 vulnerable 2026-06-08 05:07:58.344999 Details available
IBM Security Privileged Identity Manager Virtual Appliance could disclose sensitive information in generated error messages that would be available to an authenticated user.
Published: 2017-02-01T20:00:00.000Z
Updated: 2024-08-06T01:15:10.862Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5966 vulnerable 2026-06-08 05:07:58.221967 Details available
IBM Security Privileged Identity Manager Virtual Appliance could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques.
Published: 2017-02-01T20:00:00.000Z
Updated: 2024-08-06T01:15:10.889Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5964 vulnerable 2026-06-08 05:07:58.221616 Details available
IBM Security Privileged Identity Manager Virtual Appliance version 2.0.2 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials.
Published: 2017-02-01T20:00:00.000Z
Updated: 2024-08-06T01:15:10.781Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-5958 vulnerable 2026-06-08 05:07:58.212912 Details available
IBM Security Privileged Identity Manager could allow a remote attacker to obtain sensitive information, caused by the failure to set the secure flag for the session cookie in SSL mode. By intercepting its transmission within an HTTP session, an attacker could exploit this vulnerability to capture the cookie and obtain sensitive information.
Published: 2017-02-01T20:00:00.000Z
Updated: 2024-08-06T01:15:10.837Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.