CVE-2016-5990

Description

IBM Security Privileged Identity Manager Virtual Appliance allows an authenticated user to upload malicious files that would be automatically executed by the server.

Affected products

• IBM Corporation / Privileged Identity Manager1.0.1 – 1.0.1
• IBM Corporation / Privileged Identity Manager1.0.1.1 – 1.0.1.1
• IBM Corporation / Privileged Identity Manager2.0.0 – 2.0.0
• IBM Corporation / Privileged Identity Manager2.0.1 – 2.0.1
• IBM Corporation / Privileged Identity Manager2.0.2 – 2.0.2
• IBM Corporation / Privileged Identity Manager2.1.0 – 2.1.0

References

• MISChttp://www.ibm.com/support/docview.wss?uid=swg21996614
• MISChttp://www.securityfocus.com/bid/95199