Session Token Invalidation Vulnerability in IBM Security Identity Manager Virtual Appliance

Session Token Invalidation Vulnerability in IBM Security Identity Manager Virtual Appliance

CVE-2016-9703 · LOW Severity

AV:L/AC:L/AU:N/C:P/I:N/A:N

IBM Security Identity Manager Virtual Appliance does not invalidate session tokens which could allow an unauthorized user with physical access to the work station to obtain sensitive information.

Learn more about our Physical Security Assessment.