CVE-2016-3028

CWE-78 — OS Command Injection3 documents3 sources
Severity
9.1CRITICAL
EPSS
0.6%
top 31.41%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
IBM Security Access ManagerIBM Security Access Manager FOR WEB
Timeline
PublishedNov 25
Latest updateMay 17

Description

IBM Security Access Manager for Web 7.0 before IF2 and 8.0 before 8.0.1.4 IF3 and Security Access Manager 9.0 before 9.0.1.0 IF5 allow remote authenticated users to execute arbitrary commands by leveraging LMI admin access.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:HExploitability: 2.3 | Impact: 6.0

Affected Packages1 packages

▶NVDibm/security_access_manager12 versions+11

🔴Vulnerability Details

2
GHSA
GHSA-4f8w-48h8-77c3: IBM Security Access Manager for Web 7↗2022-05-17
▶
CVEList
CVE-2016-3028: IBM Security Access Manager for Web 7↗2016-11-25
▶