CVE-2016-3028

Critical

Published: 25/11/2016(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

IBM Security Access Manager for Web versions 7.0 before IF2, 8.0 before 8.0.1.4 IF3, and Security Access Manager 9.0 before 9.0.1.0 IF5 allow remote authenticated users to execute arbitrary commands by leveraging LMI admin access.

Risk Assessment

This vulnerability may lead to unauthorized command execution, posing a serious threat to the security of the system and the organization's data.

Recommendation

It is recommended to upgrade to the latest software versions to mitigate this vulnerability and to restrict access to administrative functions to trusted users.

Original NVD description (English source)

IBM Security Access Manager for Web 7.0 before IF2 and 8.0 before 8.0.1.4 IF3 and Security Access Manager 9.0 before 9.0.1.0 IF5 allow remote authenticated users to execute arbitrary commands by leveraging LMI admin access.