PT-2017-8299 · Ibm · Ibm Security Access Manager For Web
Published
2017-02-07
·
Updated
2020-10-27
·
CVE-2016-3020
CVSS v2.0
4.3
Medium
| Vector | AV:N/AC:M/Au:N/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
IBM Security Access Manager for Web versions 7.0.0 through 9.0.0
Description
The issue is caused by improper content validation, allowing a remote attacker to bypass security restrictions. An attacker could exploit this by persuading a victim to open specially-crafted content, which could then load a page with malicious content.
Recommendations
For versions 7.0.0 through 9.0.0, update the content validation mechanism to properly check and restrict malicious content.
Fix
Improper Access Control
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Ibm Security Access Manager For Web