CVE-2016-0332

IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.0 before 7.0.1-ISS-SIM-FP0001 do not properly restrict failed login attempts, which makes it easier for remote attackers to obtain access via a brute-force approach. IBM X-Force ID: 111695.

Score

CVSS 3.0 9.8 Critical

Status

Modified - psirt@us.ibm.com

Published

2018-01-12

Last modified

2024-08-05

Weaknesses

CWE-254

Affected products

• Security Identity Manager Virtual Appliance (Ibm)

References

• http://www-01.ibm.com/support/docview.wss?uid=swg21981438
• https://exchange.xforce.ibmcloud.com/vulnerabilities/111695