CVE-2016-3016: Medium severity IBM Security Access Manager 9.0 Firmware vulnerability
Published Feb 1, 2017
·Updated
IBM Security Access Manager for Web processes patches, image backups and other updates without sufficiently verifying the origin and integrity of the code, which could allow an authenticated attacker to load malicious code.
Affected Software
76 affected components
IBM Security Access Manager 9.0 Firmware=9.0.0
IBM Security Access Manager 9.0 Firmware=9.0.0.1
IBM Security Access Manager 9.0 Firmware=9.0.1.0
IBM Security Access Manager For Mobile 8.0 Firmware=8.0.0.1
IBM Security Access Manager For Mobile 8.0 Firmware=8.0.0.2
IBM Security Access Manager For Mobile 8.0 Firmware=8.0.0.3
IBM Security Access Manager For Mobile 8.0 Firmware=8.0.0.5
IBM Security Access Manager For Mobile 8.0 Firmware=8.0.1.0
IBM Security Access Manager For Mobile 8.0 Firmware=8.0.1.2
IBM Security Access Manager For Mobile 8.0 Firmware=8.0.1.3
IBM Security Access Manager For Mobile 8.0 Firmware=8.0.1.4
IBM Security Access Manager For Web 7.0 Firmware=7.0.0.1
IBM Security Access Manager For Web 7.0 Firmware=7.0.0.2
IBM Security Access Manager For Web 7.0 Firmware=7.0.0.3
IBM Security Access Manager For Web 7.0 Firmware=7.0.0.4
IBM Security Access Manager For Web 7.0 Firmware=7.0.0.5
IBM Security Access Manager For Web 7.0 Firmware=7.0.0.6
IBM Security Access Manager For Web 7.0 Firmware=7.0.0.7
IBM Security Access Manager For Web 7.0 Firmware=7.0.0.8
IBM Security Access Manager For Web 7.0 Firmware=7.0.0.9
IBM Security Access Manager For Web 7.0 Firmware=7.0.0.10
IBM Security Access Manager For Web 7.0 Firmware=7.0.0.11
IBM Security Access Manager For Web 7.0 Firmware=7.0.0.12
IBM Security Access Manager For Web 7.0 Firmware=7.0.0.13
IBM Security Access Manager For Web 7.0 Firmware=7.0.0.14
IBM Security Access Manager For Web 7.0 Firmware=7.0.0.15
IBM Security Access Manager For Web 7.0 Firmware=7.0.0.16
IBM Security Access Manager For Web 8.0 Firmware=8.0.0.1
IBM Security Access Manager For Web 8.0 Firmware=8.0.0.2
IBM Security Access Manager For Web 8.0 Firmware=8.0.0.3
IBM Security Access Manager For Web 8.0 Firmware=8.0.0.5
IBM Security Access Manager For Web 8.0 Firmware=8.0.1.0
IBM Security Access Manager For Web 8.0 Firmware=8.0.1.2
IBM Security Access Manager For Web 8.0 Firmware=8.0.1.3
IBM Security Access Manager For Web 8.0 Firmware=8.0.1.4
IBM Security Access Manager For Mobile Appliance=8.0
IBM Security Access Manager For Web Appliance=7.0
IBM Security Access Manager For Web Appliance=8.0
All of the following
Any of the following
IBM Security Access Manager 9.0 Firmware=9.0.0
IBM Security Access Manager 9.0 Firmware=9.0.0.1
IBM Security Access Manager 9.0 Firmware=9.0.1.0
IBM Security Access Manager For Mobile 8.0 Firmware=8.0.0.1
IBM Security Access Manager For Mobile 8.0 Firmware=8.0.0.2
IBM Security Access Manager For Mobile 8.0 Firmware=8.0.0.3
IBM Security Access Manager For Mobile 8.0 Firmware=8.0.0.5
IBM Security Access Manager For Mobile 8.0 Firmware=8.0.1.0
IBM Security Access Manager For Mobile 8.0 Firmware=8.0.1.2
IBM Security Access Manager For Mobile 8.0 Firmware=8.0.1.3
IBM Security Access Manager For Mobile 8.0 Firmware=8.0.1.4
IBM Security Access Manager For Web 7.0 Firmware=7.0.0.1
IBM Security Access Manager For Web 7.0 Firmware=7.0.0.2
IBM Security Access Manager For Web 7.0 Firmware=7.0.0.3
IBM Security Access Manager For Web 7.0 Firmware=7.0.0.4
IBM Security Access Manager For Web 7.0 Firmware=7.0.0.5
IBM Security Access Manager For Web 7.0 Firmware=7.0.0.6
IBM Security Access Manager For Web 7.0 Firmware=7.0.0.7
IBM Security Access Manager For Web 7.0 Firmware=7.0.0.8
IBM Security Access Manager For Web 7.0 Firmware=7.0.0.9
IBM Security Access Manager For Web 7.0 Firmware=7.0.0.10
IBM Security Access Manager For Web 7.0 Firmware=7.0.0.11
IBM Security Access Manager For Web 7.0 Firmware=7.0.0.12
IBM Security Access Manager For Web 7.0 Firmware=7.0.0.13
IBM Security Access Manager For Web 7.0 Firmware=7.0.0.14
IBM Security Access Manager For Web 7.0 Firmware=7.0.0.15
IBM Security Access Manager For Web 7.0 Firmware=7.0.0.16
IBM Security Access Manager For Web 8.0 Firmware=8.0.0.1
IBM Security Access Manager For Web 8.0 Firmware=8.0.0.2
IBM Security Access Manager For Web 8.0 Firmware=8.0.0.3
IBM Security Access Manager For Web 8.0 Firmware=8.0.0.5
IBM Security Access Manager For Web 8.0 Firmware=8.0.1.0
IBM Security Access Manager For Web 8.0 Firmware=8.0.1.2
IBM Security Access Manager For Web 8.0 Firmware=8.0.1.3
IBM Security Access Manager For Web 8.0 Firmware=8.0.1.4
Any of the following
IBM Security Access Manager For Mobile Appliance=8.0
IBM Security Access Manager For Web Appliance=7.0
IBM Security Access Manager For Web Appliance=8.0
Remediation
Patch Available
Event History
Feb 1, 2017
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
DescriptionWeakness
Data Sourced
via NVD·08:59 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2016-3016?
CVE-2016-3016 has a high severity rating due to the potential for authenticated attackers to load malicious code.
2
How do I fix CVE-2016-3016?
To fix CVE-2016-3016, apply the latest patches and updates provided by IBM for the affected versions of IBM Security Access Manager.
3
Who is affected by CVE-2016-3016?
CVE-2016-3016 affects users of IBM Security Access Manager for Web and Mobile systems, specifically certain versions of the firmware.
4
Can CVE-2016-3016 be exploited remotely?
CVE-2016-3016 requires authentication, so it cannot be exploited remotely without valid credentials.
5
What versions of IBM Security Access Manager are impacted by CVE-2016-3016?
CVE-2016-3016 impacts various versions of IBM Security Access Manager for Web and Mobile, primarily versions 7.0 to 8.0.