CVE-2016-9703 — IBM Security Identity Manager Virtual Appliance does not invalidate session tokens which could allow an unauthorized user with physical access to the work station to obtain sensitive information. — CVE Database · The Intelligence Room