Security Bulletin: IBM Security Access Manager appliances allow web pages to be stored locally (CVE-2016-3024)

Summary IBM Security Access Manager appliances allow web pages containing sensitive information to be cached by a browser. This sensitive information could be accessed from the user's hard drive by an attacker with local access or malware installed on the user's computer. Vulnerability Details...

CVE-2016-3024

IBM Security Access Manager for Web allows web pages to be stored locally which can be read by another user on the system...

CVE-2016-3024

CVE-2016-3024 affects IBM Security Access Manager family. IBM’s bulletin and IBM/ISAM pages confirm a local information-disclosure vulnerability where web pages containing sensitive info could be cached by the browser and read by another user on the same system. Affected products include IBM Secu...