CVE Feed

    Dashboard / CVE / CVE-2016-5964

    CVE-2016-5964

    IBM Security Privileged Identity Manager Virtual Appliance version 2.0.2 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials.

    Published:Feb 1, 2017
    Last Modified:Apr 20, 2025
    EPS:Feb 1, 2017
    EPSS Score:0.00386
    CVSS Score:9.8

    Affected Products

    Vendor
    Ibm
    Product
    Security Privileged Identity Manager

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-284 Improper Access Control

    Related CVEs

    CVE-2018-1680 (CVSS 5.9) — IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 does not require that users should have stron…
    CVE-2018-1640 (CVSS 8.8) — IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 could allow a remote authenticated attacker t…
    CVE-2018-1626 (CVSS 3.1) — IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 does not renew a session variable after a suc…
    CVE-2018-1625 (CVSS 4.3) — IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 generates an error message that includes sens…
    CVE-2018-1623 (CVSS 4) — IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 allows web pages to be stored locally which c…
    CVE-2018-1622 (CVSS 4.3) — IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 is vulnerable to cross-site request forgery w…
    CVE-2018-1618 (CVSS 7.7) — IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 could allow a remote attacker to traverse dir…
    CVE-2017-1705 (CVSS 4.3) — IBM Security Privileged Identity Manager 2.1.0 contains left-over, sensitive information in page comments. Whi…
    CVE-2016-0366 (CVSS 3.7) — IBM Security Identity Manager Virtual Appliance 7.0.x before 7.0.1.3-ISS-SIM-IF0001 might allow remote attacke…
    CVE-2017-1407 (CVSS 8.8) — IBM Security Identity Manager Virtual Appliance 6.0 and 7.0 could allow a remote authenticated attacker to exe…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High