CRITICAL🇵🇱 Wersja polska

CVE-2016-3028

CVSS 9.1v3.0pub. 2016-11-25upd. 2026-05-06

IBM Security Access Manager for Web 7.0 before IF2 and 8.0 before 8.0.1.4 IF3 and Security Access Manager 9.0 before 9.0.1.0 IF5 allow remote authenticated users to execute arbitrary commands by leveraging LMI admin access.

CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

  • IBM Security Access Manager

    APP
    Ibm
    9.0.09.0.0.19.0.1.0

  • IBM Security Access Manager For Web

    APP
    Ibm
    7.0.08.0.08.0.0.28.0.0.48.0.0.58.0.18.0.1.28.0.1.38.0.1.4
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Command Injection
CWE
References

Related vulnerabilities

CVE-2020-4499CRITICAL9.8PL ✓same product

IBM Security Access Manager / Verify Access — ominięcie uwierzytelnienia OAuth

CVE-2018-1722CRITICAL10.0PL ✓same product

RCE w IBM Security Access Manager Appliance 9.0.4.0 i 9.0.5.0

CVE-2023-30998HIGH7.8same product

IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 could allow a local user to obtain root access du...

CVE-2023-30997HIGH7.8same product

IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 could allow a local user to obtain root access du...

CVE-2023-38370HIGH7.5same product

IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1, under certain configurations, could allow a user...