CVE-2016-3028

IBM Security Access Manager for Web 7.0 before IF2 and 8.0 before 8.0.1.4 IF3 and Security Access Manager 9.0 before 9.0.1.0 IF5 allow remote authenticated users to execute arbitrary commands by leveraging LMI admin access.

CVSS v3 9.1 CRITICAL
CVSS v2.0 9.0 HIGH

9.1^/10

CVSS v3 : CRITICAL

Vector : AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Exploitability : 2.3 / Impact : 6.0

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

9.0^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:S/C:C/I:C/A:C

Exploitability : 8.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://www-01.ibm.com/support/docview.wss?uid=swg1IV89257	Broken Link
http://www-01.ibm.com/support/docview.wss?uid=swg1IV89322	Broken Link
http://www-01.ibm.com/support/docview.wss?uid=swg1IV89326	Broken Link
http://www-01.ibm.com/support/docview.wss?uid=swg21990317	Vendor Advisory
http://www.securityfocus.com/bid/93176

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:ibm:security_access_manager:9.0.0:::::::*
	cpe:2.3:a:ibm:security_access_manager:9.0.0.1:::::::*
	cpe:2.3:a:ibm:security_access_manager:9.0.1.0:::::::*
	cpe:2.3:a:ibm:security_access_manager_for_web:7.0.0:::::::*
	cpe:2.3:a:ibm:security_access_manager_for_web:8.0.0:::::::*
	cpe:2.3:a:ibm:security_access_manager_for_web:8.0.0.2:::::::*
	cpe:2.3:a:ibm:security_access_manager_for_web:8.0.0.4:::::::*
	cpe:2.3:a:ibm:security_access_manager_for_web:8.0.0.5:::::::*
	cpe:2.3:a:ibm:security_access_manager_for_web:8.0.1:::::::*
	cpe:2.3:a:ibm:security_access_manager_for_web:8.0.1.2:::::::*
	cpe:2.3:a:ibm:security_access_manager_for_web:8.0.1.3:::::::*
	cpe:2.3:a:ibm:security_access_manager_for_web:8.0.1.4:::::::*

History

No history.

Information

Published : 2016-11-25 03:59

Updated : 2024-02-28 15:44

NVD link : CVE-2016-3028

Mitre link : CVE-2016-3028

CVE.ORG link : CVE-2016-3028

JSON object : View

Products Affected

ibm

security_access_manager
security_access_manager_for_web

CWE

CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

{"id": "CVE-2016-3028", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 9.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C", "authentication": "SINGLE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": true, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.0", "baseScore": 9.1, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 2.3}]}, "published": "2016-11-25T03:59:07.627", "references": [{"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IV89257", "tags": ["Broken Link"], "source": "psirt@us.ibm.com"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IV89322", "tags": ["Broken Link"], "source": "psirt@us.ibm.com"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IV89326", "tags": ["Broken Link"], "source": "psirt@us.ibm.com"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21990317", "tags": ["Vendor Advisory"], "source": "psirt@us.ibm.com"}, {"url": "http://www.securityfocus.com/bid/93176", "source": "psirt@us.ibm.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-78"}]}], "descriptions": [{"lang": "en", "value": "IBM Security Access Manager for Web 7.0 before IF2 and 8.0 before 8.0.1.4 IF3 and Security Access Manager 9.0 before 9.0.1.0 IF5 allow remote authenticated users to execute arbitrary commands by leveraging LMI admin access."}, {"lang": "es", "value": "IBM Security Access Manager para Web 7.0 en versiones anteriores a IF2 y 8.0 en versiones anteriores a 8.0.1.4 IF3 y Security Access Manager 9.0 en versiones anteriores a 9.0.1.0 IF5 permiten a usuarios remotos autenticados ejecutar comandos arbitrarios aprovechando el acceso de administraci\u00f3n LMI."}], "lastModified": "2016-11-28T20:05:58.653", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:security_access_manager:9.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F49FA0E2-5FEB-4831-980E-CFBE7E44277A"}, {"criteria": "cpe:2.3:a:ibm:security_access_manager:9.0.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A6B67748-2677-44E7-B43D-857EBCA926C2"}, {"criteria": "cpe:2.3:a:ibm:security_access_manager:9.0.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2AEE420D-4686-4C58-B77A-2E509983F4C3"}, {"criteria": "cpe:2.3:a:ibm:security_access_manager_for_web:7.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "58D7CF23-E40B-48FE-B1F2-BAD47500A98B"}, {"criteria": "cpe:2.3:a:ibm:security_access_manager_for_web:8.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F6658BD1-B9F9-4C68-AC7B-66E0630ACD68"}, {"criteria": "cpe:2.3:a:ibm:security_access_manager_for_web:8.0.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4F807870-4976-43E1-89BE-F08DEEE109CD"}, {"criteria": "cpe:2.3:a:ibm:security_access_manager_for_web:8.0.0.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E9F50A5E-111B-4CF6-A531-FE88E7735140"}, {"criteria": "cpe:2.3:a:ibm:security_access_manager_for_web:8.0.0.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D54372BE-6201-48AB-A720-F29E931E52B3"}, {"criteria": "cpe:2.3:a:ibm:security_access_manager_for_web:8.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5000C473-1151-4C1C-BCB8-C410D8BDA362"}, {"criteria": "cpe:2.3:a:ibm:security_access_manager_for_web:8.0.1.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8BA1DA71-91C8-4989-98B9-E924ED7B272A"}, {"criteria": "cpe:2.3:a:ibm:security_access_manager_for_web:8.0.1.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3F884817-A712-4A89-B199-2E2483CD8363"}, {"criteria": "cpe:2.3:a:ibm:security_access_manager_for_web:8.0.1.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "52F627D1-6FB4-47A2-817D-F9EC914DAC51"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@us.ibm.com"}