CVE-2016-5972

6.8 mediumEPSS 0.8%

Medium (6.8) in ibm security privileged identity manager virtual appliance. EPSS 0.8% chance of exploitation in the next 30 days.

IBM Security Privileged Identity Manager (ISPIM) Virtual Appliance 2.x before 2.0.2 FP8 uses weak permissions for unspecified resources, which allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors.

Severity

CVSS 3.0

6.8 medium

CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 55% of CVEs (scores of 2026-10-31)
CWEs: CWE-200, CWE-284
Published: 2016-09-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ibm:security_privileged_identity_manager_virtual_appliance

References

http://www-01.ibm.com/support/docview.wss?uid=swg21989205
http://www.securityfocus.com/bid/93077
http://www-01.ibm.com/support/docview.wss?uid=swg21989205
http://www.securityfocus.com/bid/93077

Check your stack JSON