CVE-2016-0330

High

Published: 15/07/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

IBM Security Identity Manager (ISIM) Virtual Appliance versions 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 mishandles password creation, making it easier for remote attackers to gain access by leveraging an attack against the password algorithm.

Risk Assessment

This vulnerability increases the risk of unauthorized access to the system, potentially leading to serious data security breaches.

Recommendation

It is recommended to upgrade to version 7.0.1-ISS-SIM-FP0003 or later to secure the system against this threat.

Other vulnerabilities in IBM Security Identity Manager (ISIM) Virtual Appliance

CVE-2016-0340High
IBM Security Identity Manager (ISIM) Virtual Appliance versions 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 mishandles session expiration, allowing remote attackers to hijack sessions by leveraging an unattended workstation.

Original NVD description (English source)

IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 mishandles password creation, which makes it easier for remote attackers to obtain access by leveraging an attack against the password algorithm.