PT-2016-5335
CVE-2016-3028
·
تاريخ النشر
2016-11-25
·
تاريخ التحديث
2016-11-28
الوصف من
CVSS 3.1
9.1
حرجةالمقاييسAV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
IBM Security Access Manager for Web versions 7.0 through 7.0 before IF2
IBM Security Access Manager for Web versions 8.0 through 8.0.1.4 before IF3
IBM Security Access Manager versions 9.0 through 9.0.1.0 before IF5
Description
The issue allows remote authenticated users to execute arbitrary commands by leveraging LMI admin access.
Recommendations
For IBM Security Access Manager for Web versions 7.0 through 7.0 before IF2, update to a version that includes IF2 or later.
For IBM Security Access Manager for Web versions 8.0 through 8.0.1.4 before IF3, update to a version that includes IF3 or later.
For IBM Security Access Manager versions 9.0 through 9.0.1.0 before IF5, update to a version that includes IF5 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾