Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2016-3016

IBM Security Access Manager for Web processes patches, image backups and other updates without sufficiently verifying the origin and integrity of the code, which could allow an authenticated attacker to load malicious code.

Published

2017-02-01T20:59:00.427

Last Modified

2025-04-20T01:37:25.860

Status

Deferred

Source

[email protected]

Severity

CVSSv3.0: 4.4 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:S/C:N/I:P/A:N

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: SINGLE
  • Confidentiality Impact: NONE
  • Integrity Impact: PARTIAL
  • Availability Impact: NONE
Exploitability Score

6.8

Impact Score

2.9

Weaknesses
  • Type: Primary
    CWE-345
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System ibm security_access_manager_9.0_firmware 9.0.0 Yes
Operating System ibm security_access_manager_9.0_firmware 9.0.0.1 Yes
Operating System ibm security_access_manager_9.0_firmware 9.0.1.0 Yes
Operating System ibm security_access_manager_for_mobile_8.0_firmware 8.0.0.1 Yes
Operating System ibm security_access_manager_for_mobile_8.0_firmware 8.0.0.2 Yes
Operating System ibm security_access_manager_for_mobile_8.0_firmware 8.0.0.3 Yes
Operating System ibm security_access_manager_for_mobile_8.0_firmware 8.0.0.5 Yes
Operating System ibm security_access_manager_for_mobile_8.0_firmware 8.0.1.0 Yes
Operating System ibm security_access_manager_for_mobile_8.0_firmware 8.0.1.2 Yes
Operating System ibm security_access_manager_for_mobile_8.0_firmware 8.0.1.3 Yes
Operating System ibm security_access_manager_for_mobile_8.0_firmware 8.0.1.4 Yes
Operating System ibm security_access_manager_for_web_7.0_firmware 7.0.0.1 Yes
Operating System ibm security_access_manager_for_web_7.0_firmware 7.0.0.2 Yes
Operating System ibm security_access_manager_for_web_7.0_firmware 7.0.0.3 Yes
Operating System ibm security_access_manager_for_web_7.0_firmware 7.0.0.4 Yes
Operating System ibm security_access_manager_for_web_7.0_firmware 7.0.0.5 Yes
Operating System ibm security_access_manager_for_web_7.0_firmware 7.0.0.6 Yes
Operating System ibm security_access_manager_for_web_7.0_firmware 7.0.0.7 Yes
Operating System ibm security_access_manager_for_web_7.0_firmware 7.0.0.8 Yes
Operating System ibm security_access_manager_for_web_7.0_firmware 7.0.0.9 Yes
Operating System ibm security_access_manager_for_web_7.0_firmware 7.0.0.10 Yes
Operating System ibm security_access_manager_for_web_7.0_firmware 7.0.0.11 Yes
Operating System ibm security_access_manager_for_web_7.0_firmware 7.0.0.12 Yes
Operating System ibm security_access_manager_for_web_7.0_firmware 7.0.0.13 Yes
Operating System ibm security_access_manager_for_web_7.0_firmware 7.0.0.14 Yes
Operating System ibm security_access_manager_for_web_7.0_firmware 7.0.0.15 Yes
Operating System ibm security_access_manager_for_web_7.0_firmware 7.0.0.16 Yes
Operating System ibm security_access_manager_for_web_8.0_firmware 8.0.0.1 Yes
Operating System ibm security_access_manager_for_web_8.0_firmware 8.0.0.2 Yes
Operating System ibm security_access_manager_for_web_8.0_firmware 8.0.0.3 Yes
Operating System ibm security_access_manager_for_web_8.0_firmware 8.0.0.5 Yes
Operating System ibm security_access_manager_for_web_8.0_firmware 8.0.1.0 Yes
Operating System ibm security_access_manager_for_web_8.0_firmware 8.0.1.2 Yes
Operating System ibm security_access_manager_for_web_8.0_firmware 8.0.1.3 Yes
Operating System ibm security_access_manager_for_web_8.0_firmware 8.0.1.4 Yes
Hardware ibm security_access_manager_for_mobile_appliance 8.0 No
Hardware ibm security_access_manager_for_web_appliance 7.0 No
Hardware ibm security_access_manager_for_web_appliance 8.0 No
References