Not rated
CVE-2016-3016 IBM Security Access Manager for Web processes patches, image backups and other updates without sufficiently verifying…
Description
IBM Security Access Manager for Web processes patches, image backups and other updates without sufficiently verifying the origin and integrity of the code, which could allow an authenticated attacker to load malicious code.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Access Manager 9.0 | 9.0 → 9.0.1.0 | No fix stated |
| Access Manager 8.0 | 8.0.0 → 8.0.1.4 | No fix stated |
| Access Manager | 7.0.0 | No fix stated |
Other CVEs of Access Manager
The 16 CVEs of Access Manager →
CVE-2016-5919
IBM Security Access Manager for Web 7.0.0, 8.0.0, and 9.0.0 uses weaker than expected cryptographic algorithms that…
Not rated
CVE-2015-5013
The IBM Security Access Manager appliance includes configuration files that contain obfuscated plaintext-passwords which…
Not rated
CVE-2016-3020
IBM Security Access Manager for Web 7.0.0, 8.0.0, and 9.0.0 could allow a remote attacker to bypass security…
Not rated
CVE-2016-3021
IBM Security Access Manager for Web could allow an authenticated attacker to obtain sensitive information from error…
Not rated