PT-2016-5335
CVE-2016-3028
·
Published
2016-11-25
·
Updated
2016-11-28
Description by
CVSS 3.1
9.1
CriticalMetricsAV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
IBM Security Access Manager for Web versions 7.0 through 7.0 before IF2
IBM Security Access Manager for Web versions 8.0 through 8.0.1.4 before IF3
IBM Security Access Manager versions 9.0 through 9.0.1.0 before IF5
Description
The issue allows remote authenticated users to execute arbitrary commands by leveraging LMI admin access.
Recommendations
For IBM Security Access Manager for Web versions 7.0 through 7.0 before IF2, update to a version that includes IF2 or later.
For IBM Security Access Manager for Web versions 8.0 through 8.0.1.4 before IF3, update to a version that includes IF3 or later.
For IBM Security Access Manager versions 9.0 through 9.0.1.0 before IF5, update to a version that includes IF5 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾