Arbitrary Code Execution Vulnerability in IBM Security Privileged Identity Manager (ISPIM) Virtual Appliance 2.x before 2.0.2 FP8

CVE-2016-5963 · MEDIUM Severity

AV:N/AC:L/AU:S/C:P/I:P/A:P

IBM Security Privileged Identity Manager (ISPIM) Virtual Appliance 2.x before 2.0.2 FP8 does not properly validate updates, which allows remote authenticated users to execute arbitrary code via unspecified vectors.

Learn more about our User Device Pen Test.