Vulnerability CVE-2016-3016


Published: 2017-02-01

Description:
IBM Security Access Manager for Web processes patches, image backups and other updates without sufficiently verifying the origin and integrity of the code, which could allow an authenticated attacker to load malicious code.

CVSS2 => (AV:N/AC:M/Au:S/C:N/I:P/A:N)

CVSS Base Score
Impact Subscore
Exploitability Subscore
3.5/10
2.9/10
6.8/10
Exploit range
Attack complexity
Authentication
Remote
Medium
Single time
Confidentiality impact
Integrity impact
Availability impact
None
Partial
None
Affected software
IBM -> Security access manager for web 7.0 firmware 
IBM -> Security access manager for web 8.0 firmware 
IBM -> Security access manager 9.0 firmware 
IBM -> Security access manager for mobile 8.0 firmware 

 References:
http://www.ibm.com/support/docview.wss?uid=swg21995518

Copyright 2024, cxsecurity.com

 

Back to Top