CVE-2016-0338 Information disclosure in n/a

What is CVE-2016-0338?

CVE-2016-0338 is a medium-severity vulnerability in n/a, published on 15 Jul 2016. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

IBM Security Identity Manager (ISIM) Virtual Appliance 7.0.0.0 through 7.0.1.1 before 7.0.1-ISS-SIM-FP0003 allows local users to discover cleartext passwords by (1) reading a configuration file or (2) examining a process.

Weakness: CWE-200

Which versions are affected by CVE-2016-0338?

It affects 1 product.

Products include Ibm Security Identity Manager Adapter.

How do I fix CVE-2016-0338?

No fix has been published for CVE-2016-0338 yet. Limit exposure of the affected software until one is available.

Is CVE-2016-0338 being exploited?

There is no known exploitation of CVE-2016-0338 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2021-20574 Other in Security Identity Manager Adapters High 7.5
• CVE-2016-0340 Auth bypass in n/a High 7.4
• CVE-2016-0330 Weak cryptography in n/a High 7.3
• CVE-2021-20494 Memory corruption in Security Identity Manager Adapters Medium 6.5
• CVE-2021-20572 Memory corruption in Security Identity Manager Adapters Medium 6.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-686q-p4vq-rq82.