VYPR
← All advisories
High severity8.1NVD Advisory· Published Nov 25, 2016· Updated Jun 17, 2026

CVE-2016-3025

CVE-2016-3025

Description

IBM Security Access Manager for Mobile 8.x before 8.0.1.4 IF3 and Security Access Manager 9.x before 9.0.1.0 IF5 do not properly restrict failed login attempts, which makes it easier for remote attackers to obtain access via a brute-force approach.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

15
  • IBM/Security Access Manager For Web 8.0 Firmware3 versions
    cpe:2.3:a:ibm:security_access_manager:9.0.0:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:ibm:security_access_manager:9.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:security_access_manager:9.0.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:security_access_manager:9.0.1.0:*:*:*:*:*:*:*
  • IBM/Security Access Manager For Mobile11 versions
    cpe:2.3:a:ibm:security_access_manager_for_mobile:8.0.0.0:*:*:*:*:*:*:*+ 10 more
    • cpe:2.3:a:ibm:security_access_manager_for_mobile:8.0.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:security_access_manager_for_mobile:8.0.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:security_access_manager_for_mobile:8.0.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:security_access_manager_for_mobile:8.0.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:security_access_manager_for_mobile:8.0.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:security_access_manager_for_mobile:8.0.0.5:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:security_access_manager_for_mobile:8.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:security_access_manager_for_mobile:8.0.1.2:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:security_access_manager_for_mobile:8.0.1.3:*:*:*:*:*:*:*
    • cpe:2.3:a:ibm:security_access_manager_for_mobile:8.0.1.4:*:*:*:*:*:*:*
    • (no CPE)range: <8.0.1.4 IF3
  • IBM/IBM Security Access Managerllm-fuzzy
    Range: <9.0.1.0 IF5

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.