{"api_version":"1","generated_at":"2026-07-23T20:31:17+00:00","cve":"CVE-2016-3045","urls":{"html":"https://cve.report/CVE-2016-3045","api":"https://cve.report/api/cve/CVE-2016-3045.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2016-3045","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2016-3045"},"summary":{"title":"CVE-2016-3045","description":"IBM Security Access Manager for Web stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referer header or browser history.","state":"PUBLISHED","assigner":"ibm","published_at":"2017-02-01 20:59:00","updated_at":"2025-04-20 01:37:25"},"problem_types":["CWE-200","Obtain Information"],"metrics":[{"version":"3.0","source":"nvd@nist.gov","type":"Primary","score":"3.7","severity":"LOW","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","data":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":3.7,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"}},{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4.3","severity":"","vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"}}],"references":[{"url":"http://www.ibm.com/support/docview.wss?uid=swg21995435","name":"http://www.ibm.com/support/docview.wss?uid=swg21995435","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"IBM Security Bulletin: IBM Security Access Manager appliances are affected by an information disclosure vulnerability (CVE-2016-3045) - United States","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/95103","name":"http://www.securityfocus.com/bid/95103","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"title":"IBM Security Access Manager for Web CVE-2016-3045 Information Disclosure Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-3045","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3045","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"IBM Corporation","product":"Access Manager","version":"affected 9.0","platforms":[]},{"source":"CNA","vendor":"IBM Corporation","product":"Access Manager","version":"affected 9.0.0.1","platforms":[]},{"source":"CNA","vendor":"IBM Corporation","product":"Access Manager","version":"affected 9.0.1","platforms":[]},{"source":"CNA","vendor":"IBM Corporation","product":"Access Manager","version":"affected 7.0.0","platforms":[]},{"source":"CNA","vendor":"IBM Corporation","product":"Access Manager","version":"affected 8.0.0","platforms":[]},{"source":"CNA","vendor":"IBM Corporation","product":"Access Manager","version":"affected 8.0.0.1","platforms":[]},{"source":"CNA","vendor":"IBM Corporation","product":"Access Manager","version":"affected 8.0.0.2","platforms":[]},{"source":"CNA","vendor":"IBM Corporation","product":"Access Manager","version":"affected 8.0.0.3","platforms":[]},{"source":"CNA","vendor":"IBM Corporation","product":"Access Manager","version":"affected 8.0.0.4","platforms":[]},{"source":"CNA","vendor":"IBM Corporation","product":"Access Manager","version":"affected 8.0.0.5","platforms":[]},{"source":"CNA","vendor":"IBM Corporation","product":"Access Manager","version":"affected 8.0.1","platforms":[]},{"source":"CNA","vendor":"IBM Corporation","product":"Access Manager","version":"affected 8.0.1.2","platforms":[]},{"source":"CNA","vendor":"IBM Corporation","product":"Access Manager","version":"affected 8.0.1.3","platforms":[]},{"source":"CNA","vendor":"IBM Corporation","product":"Access Manager","version":"affected 8.0.1.4","platforms":[]},{"source":"CNA","vendor":"IBM Corporation","product":"Access Manager","version":"affected 9.0.0","platforms":[]},{"source":"CNA","vendor":"IBM Corporation","product":"Access Manager","version":"affected 9.0.1.0","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2016","cve_id":"3045","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"security_access_manager","cpe6":"9.0.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2016","cve_id":"3045","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"security_access_manager","cpe6":"9.0.0.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2016","cve_id":"3045","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"security_access_manager","cpe6":"9.0.1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2016","cve_id":"3045","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"security_access_manager_for_mobile","cpe6":"8.0.0.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2016","cve_id":"3045","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"security_access_manager_for_mobile","cpe6":"8.0.0.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2016","cve_id":"3045","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"security_access_manager_for_mobile","cpe6":"8.0.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2016","cve_id":"3045","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"security_access_manager_for_mobile","cpe6":"8.0.1.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2016","cve_id":"3045","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"security_access_manager_for_mobile","cpe6":"8.0.1.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2016","cve_id":"3045","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"security_access_manager_for_mobile","cpe6":"8.0.1.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2016","cve_id":"3045","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"security_access_manager_for_web","cpe6":"7.0.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2016","cve_id":"3045","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"security_access_manager_for_web","cpe6":"8.0.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2016","cve_id":"3045","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"security_access_manager_for_web","cpe6":"8.0.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2016","cve_id":"3045","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"security_access_manager_for_web","cpe6":"8.0.1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2016","cve_id":"3045","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"security_access_manager_for_web","cpe6":"8.0.1.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2016","cve_id":"3045","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"security_access_manager_for_web","cpe6":"8.0.1.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2016","cve_id":"3045","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"security_access_manager_for_web","cpe6":"8.0.1.4","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-05T23:40:15.078Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.ibm.com/support/docview.wss?uid=swg21995435"},{"name":"95103","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/95103"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"Access Manager","vendor":"IBM Corporation","versions":[{"status":"affected","version":"9.0"},{"status":"affected","version":"9.0.0.1"},{"status":"affected","version":"9.0.1"},{"status":"affected","version":"7.0.0"},{"status":"affected","version":"8.0.0"},{"status":"affected","version":"8.0.0.1"},{"status":"affected","version":"8.0.0.2"},{"status":"affected","version":"8.0.0.3"},{"status":"affected","version":"8.0.0.4"},{"status":"affected","version":"8.0.0.5"},{"status":"affected","version":"8.0.1"},{"status":"affected","version":"8.0.1.2"},{"status":"affected","version":"8.0.1.3"},{"status":"affected","version":"8.0.1.4"},{"status":"affected","version":"9.0.0"},{"status":"affected","version":"9.0.1.0"}]}],"datePublic":"2017-02-01T00:00:00.000Z","descriptions":[{"lang":"en","value":"IBM Security Access Manager for Web stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referer header or browser history."}],"problemTypes":[{"descriptions":[{"description":"Obtain Information","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-02-02T10:57:01.000Z","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","shortName":"ibm"},"references":[{"tags":["x_refsource_CONFIRM"],"url":"http://www.ibm.com/support/docview.wss?uid=swg21995435"},{"name":"95103","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/95103"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@us.ibm.com","ID":"CVE-2016-3045","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Access Manager","version":{"version_data":[{"version_value":"9.0"},{"version_value":"9.0.0.1"},{"version_value":"9.0.1"},{"version_value":"7.0.0"},{"version_value":"8.0.0"},{"version_value":"8.0.0.1"},{"version_value":"8.0.0.2"},{"version_value":"8.0.0.3"},{"version_value":"8.0.0.4"},{"version_value":"8.0.0.5"},{"version_value":"8.0.1"},{"version_value":"8.0.1.2"},{"version_value":"8.0.1.3"},{"version_value":"8.0.1.4"},{"version_value":"9.0.0"},{"version_value":"9.0.1.0"}]}}]},"vendor_name":"IBM Corporation"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"IBM Security Access Manager for Web stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referer header or browser history."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Obtain Information"}]}]},"references":{"reference_data":[{"name":"http://www.ibm.com/support/docview.wss?uid=swg21995435","refsource":"CONFIRM","url":"http://www.ibm.com/support/docview.wss?uid=swg21995435"},{"name":"95103","refsource":"BID","url":"http://www.securityfocus.com/bid/95103"}]}}}},"cveMetadata":{"assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","assignerShortName":"ibm","cveId":"CVE-2016-3045","datePublished":"2017-02-01T20:00:00.000Z","dateReserved":"2016-03-09T00:00:00.000Z","dateUpdated":"2024-08-05T23:40:15.078Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2017-02-01 20:59:00","lastModifiedDate":"2025-04-20 01:37:25","problem_types":["CWE-200","Obtain Information"],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N","baseScore":3.7,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.2,"impactScore":1.4}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:N/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_access_manager:9.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F49FA0E2-5FEB-4831-980E-CFBE7E44277A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_access_manager:9.0.0.1:*:*:*:*:*:*:*","matchCriteriaId":"A6B67748-2677-44E7-B43D-857EBCA926C2"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_access_manager:9.0.1.0:*:*:*:*:*:*:*","matchCriteriaId":"2AEE420D-4686-4C58-B77A-2E509983F4C3"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_access_manager_for_mobile:8.0.0.0:*:*:*:*:*:*:*","matchCriteriaId":"44310E32-EA05-420B-8676-4E6EEAFB6631"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_access_manager_for_mobile:8.0.0.5:*:*:*:*:*:*:*","matchCriteriaId":"2EE90667-0C16-4E4B-98DC-A6AD7A073D64"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_access_manager_for_mobile:8.0.1:*:*:*:*:*:*:*","matchCriteriaId":"AA8844A0-17D5-4EE9-85C4-518DACE7C9D0"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_access_manager_for_mobile:8.0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"F0D646B2-7308-43A0-AE76-873946FB024E"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_access_manager_for_mobile:8.0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"4B1988E5-DFE6-4282-B9D3-6655297B481B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_access_manager_for_mobile:8.0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"4BEF4063-73D7-416D-AD21-CDC1C0534677"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_access_manager_for_web:7.0.0:*:*:*:*:*:*:*","matchCriteriaId":"58D7CF23-E40B-48FE-B1F2-BAD47500A98B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_access_manager_for_web:8.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F6658BD1-B9F9-4C68-AC7B-66E0630ACD68"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_access_manager_for_web:8.0.1:*:*:*:*:*:*:*","matchCriteriaId":"5000C473-1151-4C1C-BCB8-C410D8BDA362"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_access_manager_for_web:8.0.1.1:*:*:*:*:*:*:*","matchCriteriaId":"AB037932-234B-41AD-8119-D964796ADDFD"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_access_manager_for_web:8.0.1.2:*:*:*:*:*:*:*","matchCriteriaId":"8BA1DA71-91C8-4989-98B9-E924ED7B272A"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_access_manager_for_web:8.0.1.3:*:*:*:*:*:*:*","matchCriteriaId":"3F884817-A712-4A89-B199-2E2483CD8363"},{"vulnerable":true,"criteria":"cpe:2.3:a:ibm:security_access_manager_for_web:8.0.1.4:*:*:*:*:*:*:*","matchCriteriaId":"52F627D1-6FB4-47A2-817D-F9EC914DAC51"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2016","CveId":"3045","Ordinal":"1","Title":"CVE-2016-3045","CVE":"CVE-2016-3045","Year":"2016"},"notes":[{"CveYear":"2016","CveId":"3045","Ordinal":"1","NoteData":"IBM Security Access Manager for Web stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referer header or browser history.","Type":"Description","Title":"CVE-2016-3045"},{"CveYear":"2016","CveId":"3045","Ordinal":"2","NoteData":"2017-02-01","Type":"Other","Title":"Published"},{"CveYear":"2016","CveId":"3045","Ordinal":"3","NoteData":"2017-02-02","Type":"Other","Title":"Modified"}]}}}