CVE-2016-9703

LowCVSS 2.4/10Last modified Jun 17, 2026

Description

IBM Security Identity Manager Virtual Appliance does not invalidate session tokens which could allow an unauthorized user with physical access to the work station to obtain sensitive information.

Metrics

CVSS 3.0 2.4/10CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-384

Affected software

Vendor	Product	Versions
IBM Corporation	Identity Manager	6.0; 5.0; 5.1; 6; 7.0; 7

References

http://www.ibm.com/support/docview.wss?uid=swg21996761Patch, Vendor Advisory
http://www.securityfocus.com/bid/95327Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1037765
http://www.ibm.com/support/docview.wss?uid=swg21996761Patch, Vendor Advisory
http://www.securityfocus.com/bid/95327Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1037765

Timeline

Published: Feb 1, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2016

CVE-2016-97046.1IBM Security Identity Manager Virtual Appliance is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary Ja CVE-2016-97069.1IBM Integration Bus 9.0 and 10.0 and WebSphere Message Broker SOAP FLOWS is vulnerable to a denial of service, caused by an XML External Ent CVE-2016-97078.1IBM Jazz Foundation is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A CVE-2016-97105.3IBM Predictive Solutions Foundation (formerly PMQ) could allow a remote attacker to include arbitrary files. A remote attacker could send a CVE-2016-97115.3IBM Predictive Solutions Foundation (IBM Cognos Analytics 11.0) reveals sensitive information in detailed error messages that could aid an a CVE-2016-97148.8IBM InfoSphere Master Data Management Server 10.1, 11.0, 11.3, 11.4, 11.5, and 11.6 is vulnerable to cross-site request forgery which could CVE-2016-97155.4IBM InfoSphere Master Data Management Server 11.0, 11.3, 11.4, 11.5, and 11.6 is vulnerable to cross-site scripting. This vulnerability allo CVE-2016-97168.8IBM InfoSphere Master Data Management Server 11.0, 11.3, 11.4, 11.5, and 11.6 is vulnerable to cross-site request forgery which could allow CVE-2016-97176.5HTTP Parameter Override is identified in the IBM Infosphere Master Data Management (MDM) 10.1. 11.0. 11.3, 11.4, 11.5, and 11.6 product. It CVE-2016-97185.4IBM InfoSphere Master Data Management Server 10.1. 11.0. 11.3, 11.4, 11.5, and 11.6 is vulnerable to cross-site scripting. This vulnerabilit CVE-2016-97195.7IBM InfoSphere Master Data Management Server 10.1. 11.0. 11.3, 11.4, 11.5, and 11.6 could allow a remote attacker to hijack the clicking act CVE-2016-97205.3IBM QRadar 7.2 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IB