CVE-2016-0335: CSRF

Published Jan 12, 2018

Updated

Cross-site request forgery (CSRF) vulnerability in IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.0 before 7.0.1-ISS-SIM-FP0001 allows remote attackers to hijack the authentication of users for requests that have unspecified impact via unknown vectors. IBM X-Force ID: 111736.

Affected Software

5 affected components

IBM Security Identity Manager=7.0.0.0

IBM Security Identity Manager=7.0.0.1

IBM Security Identity Manager=7.0.0.2

IBM Security Identity Manager=7.0.0.3

IBM Security Identity Manager=7.0.1.0

Remediation

Patch Available

http://www-01.ibm.com/support/docview.wss?uid=swg21981438

Event History

Jan 12, 2018

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

Description

Frequently Asked Questions

What is CVE-2016-0335?

CVE-2016-0335 is a cross-site request forgery (CSRF) vulnerability in IBM Security Identity Manager (ISIM) Virtual Appliance.

How does CVE-2016-0335 affect IBM Security Identity Manager?

CVE-2016-0335 allows remote attackers to hijack the authentication of users for requests that have unspecified impact via unknown vectors.

What is the severity of CVE-2016-0335?

CVE-2016-0335 has a severity rating of 8.8 (High).

Which version of IBM Security Identity Manager is affected by CVE-2016-0335?

CVE-2016-0335 affects IBM Security Identity Manager versions 7.0.0.0 through 7.0.1.0.

How can I fix CVE-2016-0335?

To fix CVE-2016-0335, users should apply the necessary patches or updates provided by IBM.