CWE Code: 284
Vulnerability Type: privilege_escalation
CVSS Score: 6.5
CWE Name:  Improper Access Control
Summary: ibm security privileged identity manager (ispim) virtual appliance 2.x before 2.0.2 fp8 does not properly validate updates, which allows remote authenticated users to execute arbitrary code via unspecified vectors.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2016-09-26
Last Modified Date: 2016-11-28