CVE-2016-3051

Опубликовано: 07 июн. 2017

Источник: nvd

CVSS3: 4.3

CVSS2: 4

EPSS Низкий

Описание

IBM Security Access Manager for Web 9.0.0 could allow an authenticated user to access some privileged functionality of the server. IBM X-Force ID: 114714.

Ссылки

http://www.ibm.com/support/docview.wss?uid=swg21995724
Patch
Vendor Advisory
http://www.securityfocus.com/bid/98912
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1038615
https://exchange.xforce.ibmcloud.com/vulnerabilities/114714
VDB Entry
Vendor Advisory
http://www.ibm.com/support/docview.wss?uid=swg21995724
Patch
Vendor Advisory
http://www.securityfocus.com/bid/98912
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1038615
https://exchange.xforce.ibmcloud.com/vulnerabilities/114714
VDB Entry
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:ibm:security_access_manager_9.0_firmware:*:*:*:*:*:*:*:*

EPSS

Процентиль: 47%

0.00243

Низкий

4.3 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-264

Связанные уязвимости

GHSA-fmm8-xvvq-mvx7