Critical severity9.1NVD Advisory· Published Nov 25, 2016· Updated May 6, 2026
CVE-2016-3028
CVE-2016-3028
Description
IBM Security Access Manager for Web 7.0 before IF2 and 8.0 before 8.0.1.4 IF3 and Security Access Manager 9.0 before 9.0.1.0 IF5 allow remote authenticated users to execute arbitrary commands by leveraging LMI admin access.
Affected products
12cpe:2.3:a:ibm:security_access_manager:9.0.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:ibm:security_access_manager:9.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:security_access_manager:9.0.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:security_access_manager:9.0.1.0:*:*:*:*:*:*:*
cpe:2.3:a:ibm:security_access_manager_for_web:7.0.0:*:*:*:*:*:*:*+ 8 more
- cpe:2.3:a:ibm:security_access_manager_for_web:7.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:security_access_manager_for_web:8.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:security_access_manager_for_web:8.0.0.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:security_access_manager_for_web:8.0.0.4:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:security_access_manager_for_web:8.0.0.5:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:security_access_manager_for_web:8.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:security_access_manager_for_web:8.0.1.2:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:security_access_manager_for_web:8.0.1.3:*:*:*:*:*:*:*
- cpe:2.3:a:ibm:security_access_manager_for_web:8.0.1.4:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
5- www-01.ibm.com/support/docview.wssnvdVendor Advisory
- www-01.ibm.com/support/docview.wssnvdBroken Link
- www-01.ibm.com/support/docview.wssnvdBroken Link
- www-01.ibm.com/support/docview.wssnvdBroken Link
- www.securityfocus.com/bid/93176nvd
News mentions
0No linked articles in our index yet.