Security Bulletin: IBM Security Access Manager appliances are affected by an information exposure vulnerability (CVE-2016-3043)

Summary IBM Security Access Manager appliances could allow a remote attacker to obtain sensitive information by using man in the middle techniques. Vulnerability Details CVEID: CVE-2016-3043 DESCRIPTION: IBM Security Access Manager for Web could allow a remote attacker to obtain sensitive...

CVE-2016-3043

CVE-2016-3043 corresponds to an information disclosure vulnerability in IBM Security Access Manager for Web (and related ISAM lines) caused by failure to properly enable HTTP Strict Transport Security. A remote attacker could obtain sensitive information via man-in-the-middle techniques. Affected...