NetSight
low2.7

CVE-2016-3021

IBM Security Access Manager for Web could allow an authenticated attacker to obtain sensitive information from error message using a specially crafted HTTP req…

Impact

IBM Security Access Manager for Web could allow an authenticated attacker to obtain sensitive information from error message using a specially crafted HTTP request.

Affected products

VendorProductAffected versions
IbmSecurity Access Manager 9.0 Firmware
Versions 9.0.0, 9.0.0.1, 9.0.1.0
IbmSecurity Access Manager For Mobile 8.0 Firmware
Versions 8.0.0.1, 8.0.0.2, 8.0.0.3, 8.0.0.5, 8.0.1.0, 8.0.1.2
IbmSecurity Access Manager For Web 7.0 Firmware
Versions 7.0.0.1, 7.0.0.2, 7.0.0.3, 7.0.0.4, 7.0.0.5, 7.0.0.6
IbmSecurity Access Manager For Web 8.0 Firmware
Versions 8.0.0.1, 8.0.0.2, 8.0.0.3, 8.0.0.5, 8.0.1.0, 8.0.1.2

Weakness classification

References