CVE-2016-3029

Summary

IBM Security Access Manager for Web is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.

Affected Software

VendorProductVersion RangeStatus
IBM CorporationAccess Manager9.0affected
IBM CorporationAccess Manager9.0.0.1affected
IBM CorporationAccess Manager9.0.1affected
IBM CorporationAccess Manager7.0.0affected
IBM CorporationAccess Manager8.0.0affected
IBM CorporationAccess Manager8.0.0.1affected
IBM CorporationAccess Manager8.0.0.2affected
IBM CorporationAccess Manager8.0.0.3affected
IBM CorporationAccess Manager8.0.0.4affected
IBM CorporationAccess Manager8.0.0.5affected
IBM CorporationAccess Manager8.0.1affected
IBM CorporationAccess Manager8.0.1.2affected
IBM CorporationAccess Manager8.0.1.3affected
IBM CorporationAccess Manager8.0.1.4affected
IBM CorporationAccess Manager9.0.0affected
IBM CorporationAccess Manager9.0.1.0affected

Weaknesses

  • Gain Access

ADP Enrichment

CVE Program Container

Additional References

References