High severity7.5NVD Advisory· Published Feb 1, 2017· Updated May 13, 2026

CVE-2016-5958

Description

IBM Security Privileged Identity Manager could allow a remote attacker to obtain sensitive information, caused by the failure to set the secure flag for the session cookie in SSL mode. By intercepting its transmission within an HTTP session, an attacker could exploit this vulnerability to capture the cookie and obtain sensitive information.

Affected products

IBM/Security Privileged Identity Manager2 versions
cpe:2.3:a:ibm:security_privileged_identity_manager:2.0.2:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:ibm:security_privileged_identity_manager:2.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:security_privileged_identity_manager:2.1:*:*:*:*:*:*:*
IBM Corporation/Privileged Identity Managerv5
Range: 1.0.1

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.ibm.com/support/docview.wssnvdPatchVendor Advisory
www.securityfocus.com/bid/95196nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000