Security Bulletin: IBM Security Access Manager appliances are affected by an information exposure vulnerability (CVE-2016-3021)

Summary In certain circumstances, IBM Security Access Manager appliances may generate an error message that includes sensitive information about its environment, users, or associated data. Vulnerability Details CVEID: CVE-2016-3021 DESCRIPTION: IBM Security Access Manager for Web could allow an...

CVE-2016-3021

IBM Security Access Manager for Web could allow an authenticated attacker to obtain sensitive information from error message using a specially crafted HTTP request...

CVE-2016-3021

CVE-2016-3021 affects IBM Security Access Manager for Web and related appliances. An authenticated attacker could cause an error message to reveal sensitive environment data via a specially crafted HTTP request. The IBM bulletin lists affected products/versions: Web 7.0 appliances, Web 8.0.x, Web...