CVE-2016-0340

High

Published: 15/07/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

IBM Security Identity Manager (ISIM) Virtual Appliance versions 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 mishandles session expiration, allowing remote attackers to hijack sessions by leveraging an unattended workstation.

Risk Assessment

This vulnerability poses a risk of session hijacking by unauthorized users, potentially leading to unauthorized access to sensitive data and system functions.

Recommendation

It is recommended to upgrade to version 7.0.1-ISS-SIM-FP0003 or later to secure the system against this threat.

Other vulnerabilities in IBM Security Identity Manager (ISIM) Virtual Appliance

CVE-2016-0330High
IBM Security Identity Manager (ISIM) Virtual Appliance versions 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 mishandles password creation, making it easier for remote attackers to gain access by leveraging an attack against the password algorithm.

Original NVD description (English source)

IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 mishandles session expiration, which allows remote attackers to hijack sessions by leveraging an unattended workstation.