NetSight
medium5.3

CVE-2016-3023

IBM Security Access Manager for Web could allow an unauthenticated user to gain access to sensitive information by entering invalid file names.

Impact

IBM Security Access Manager for Web could allow an unauthenticated user to gain access to sensitive information by entering invalid file names.

Affected products

VendorProductAffected versions
IbmSecurity Access Manager 9.0 Firmware
Versions 9.0.0, 9.0.0.1, 9.0.1.0
IbmSecurity Access Manager For Mobile 8.0 Firmware
Versions 8.0.0.1, 8.0.0.2, 8.0.0.3, 8.0.0.5, 8.0.1.0, 8.0.1.2
IbmSecurity Access Manager For Web 7.0 Firmware
Versions 7.0.0.1, 7.0.0.2, 7.0.0.3, 7.0.0.4, 7.0.0.5, 7.0.0.6
IbmSecurity Access Manager For Web 8.0 Firmware
Versions 8.0.0.1, 8.0.0.2, 8.0.0.3, 8.0.0.5, 8.0.1.0, 8.0.1.2

Weakness classification

References