CWE Code: 200
Vulnerability Type: privilege_escalation
CVSS Score: 5.0
CWE Name:  Information Exposure
Summary: ibm security privileged identity manager 2.0.2 and 2.1.0 stores sensitive information in url parameters. this may lead to information disclosure if unauthorized parties have access to the urls via server logs, referrer header or browser history. ibm x-force id: 116136.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/NONE/NONE
Published Date: 2017-06-07
Last Modified Date: 2017-06-13