SB2016071112 - Sensitive information disclosure in IBM Security Identity Manager Virtual Appliance
Published: July 11, 2016 Updated: July 12, 2020
Security Bulletin ID
SB2016071112
Severity
Medium
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Information disclosure
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Sensitive information disclosure in IBM Security Identity Manager Virtual Appliance (CVE-ID: CVE-2016-0338)
The vulnerability allows a local user to obtain potentially sensitive information.The vulnerability exists in IBM Security Identity Manager Virtual Appliance. A local user can obtain sensitive information including passwords in cleartext by examining configuration files and running processes.
Successful exploitation of this vulnerability may result in disclosure of authentication information.
Remediation
Install update from vendor's website.