Vulnerability Description
IBM Security Access Manager for Web 7.0.0, 8.0.0, and 9.0.0 could allow a remote attacker to bypass security restrictions, caused by improper content validation. By persuading a victim to open specially-crafted content, an attacker could exploit this vulnerability to bypass validation and load a page with malicious content.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Security Access Manager For Web 7.0 Firmware | All versions |
| Ibm | Security Access Manager For Web Appliance | 7.0 |
| Ibm | Security Access Manager For Web 8.0 Firmware | All versions |
| Ibm | Security Access Manager For Mobile | All versions |
| Ibm | Security Access Manager For Mobile Appliance | 8.0 |
| Ibm | Security Access Manager 9.0 Firmware | All versions |
Related Weaknesses (CWE)
References
- http://www.ibm.com/support/docview.wss?uid=swg21996826PatchVendor Advisory
- http://www.ibm.com/support/docview.wss?uid=swg21996826PatchVendor Advisory
FAQ
What is CVE-2016-3020?
CVE-2016-3020 is a vulnerability with a CVSS score of 5.5 (MEDIUM). IBM Security Access Manager for Web 7.0.0, 8.0.0, and 9.0.0 could allow a remote attacker to bypass security restrictions, caused by improper content validation. By persuading a victim to open special...
How severe is CVE-2016-3020?
CVE-2016-3020 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2016-3020?
Check the references section above for vendor advisories and patch information. Affected products include: Ibm Security Access Manager For Web 7.0 Firmware, Ibm Security Access Manager For Web Appliance, Ibm Security Access Manager For Web 8.0 Firmware, Ibm Security Access Manager For Mobile, Ibm Security Access Manager For Mobile Appliance.