CVE-2016-3016
Summary
| CVE | CVE-2016-3016 |
|---|---|
| State | PUBLISHED |
| Assigner | ibm |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2017-02-01 20:59:00 UTC |
| Updated | 2025-04-20 01:37:25 UTC |
| Description | IBM Security Access Manager for Web processes patches, image backups and other updates without sufficiently verifying the origin and integrity of the code, which could allow an authenticated attacker to load malicious code. |
Risk And Classification
Primary CVSS: v3.0 4.4 MEDIUM from [email protected]
CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N
Problem Types: CWE-345 | Gain Access
| Version | Source | Type | Score | Severity | Vector |
|---|---|---|---|---|---|
| 3.0 | [email protected] | Primary | 4.4 | MEDIUM | CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N |
| 2.0 | [email protected] | Primary | 3.5 | AV:N/AC:M/Au:S/C:N/I:P/A:N |
CVSS v3.0 Breakdown
Attack Vector
NetworkAttack Complexity
HighPrivileges Required
HighUser Interaction
NoneScope
UnchangedConfidentiality
NoneIntegrity
HighAvailability
NoneCVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
MediumAuthentication
SingleConfidentiality
NoneIntegrity
PartialAvailability
NoneAV:N/AC:M/Au:S/C:N/I:P/A:N
NVD Known Affected Configurations (CPE 2.3)
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|---|---|---|---|
| CNA | IBM Corporation | Access Manager | affected 9.0 | Not specified |
| CNA | IBM Corporation | Access Manager | affected 9.0.0.1 | Not specified |
| CNA | IBM Corporation | Access Manager | affected 9.0.1 | Not specified |
| CNA | IBM Corporation | Access Manager | affected 7.0.0 | Not specified |
| CNA | IBM Corporation | Access Manager | affected 8.0.0 | Not specified |
| CNA | IBM Corporation | Access Manager | affected 8.0.0.1 | Not specified |
| CNA | IBM Corporation | Access Manager | affected 8.0.0.2 | Not specified |
| CNA | IBM Corporation | Access Manager | affected 8.0.0.3 | Not specified |
| CNA | IBM Corporation | Access Manager | affected 8.0.0.4 | Not specified |
| CNA | IBM Corporation | Access Manager | affected 8.0.0.5 | Not specified |
| CNA | IBM Corporation | Access Manager | affected 8.0.1 | Not specified |
| CNA | IBM Corporation | Access Manager | affected 8.0.1.2 | Not specified |
| CNA | IBM Corporation | Access Manager | affected 8.0.1.3 | Not specified |
| CNA | IBM Corporation | Access Manager | affected 8.0.1.4 | Not specified |
| CNA | IBM Corporation | Access Manager | affected 9.0.0 | Not specified |
| CNA | IBM Corporation | Access Manager | affected 9.0.1.0 | Not specified |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| IBM Security Bulletin: IBM Security Access Manager appliances are affected by a vulnerability related to code integrity checking (CVE-2016-3016) - United States | af854a3a-2127-422b-91ae-364da2661108 | www.ibm.com | Patch, Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.