NetSight
high8.8

CVE-2016-3029

IBM Security Access Manager for Web is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions tra…

Impact

IBM Security Access Manager for Web is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.

Affected products

VendorProductAffected versions
IbmSecurity Access Manager 9.0 Firmware
Versions 9.0.0, 9.0.0.1, 9.0.1.0
IbmSecurity Access Manager For Mobile 8.0 Firmware
Versions 8.0.0.1, 8.0.0.2, 8.0.0.3, 8.0.0.5, 8.0.1.0, 8.0.1.2
IbmSecurity Access Manager For Web 8.0 Firmware
Versions 8.0.0.1, 8.0.0.2, 8.0.0.3, 8.0.0.5, 8.0.1.0, 8.0.1.2

Weakness classification

References