CVE-2016-5988

Description

IBM Security Privileged Identity Manager Virtual Appliance could disclose sensitive information in generated error messages that would be available to an authenticated user.

Affected products

• IBM Corporation / Privileged Identity Manager1.0.1 – 1.0.1
• IBM Corporation / Privileged Identity Manager1.0.1.1 – 1.0.1.1
• IBM Corporation / Privileged Identity Manager2.0.0 – 2.0.0
• IBM Corporation / Privileged Identity Manager2.0.1 – 2.0.1
• IBM Corporation / Privileged Identity Manager2.0.2 – 2.0.2
• IBM Corporation / Privileged Identity Manager2.1.0 – 2.1.0

References

• MISChttp://www.ibm.com/support/docview.wss?uid=swg21996614
• MISChttp://www.securityfocus.com/bid/95198