CVE-2016-5964

Summary

IBM Security Privileged Identity Manager Virtual Appliance version 2.0.2 uses an inadequate account lockout setting that could allow a remote attacker to brute force account credentials.

Affected Software

VendorProductVersion RangeStatus
IBM CorporationPrivileged Identity Manager1.0.1affected
IBM CorporationPrivileged Identity Manager1.0.1.1affected
IBM CorporationPrivileged Identity Manager2.0.0affected
IBM CorporationPrivileged Identity Manager2.0.1affected
IBM CorporationPrivileged Identity Manager2.0.2affected
IBM CorporationPrivileged Identity Manager2.1.0affected

Weaknesses

  • Obtain Information

ADP Enrichment

CVE Program Container

Additional References

References