CVE-2016-3019

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

IBM Security Access Manager for Web 9.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 114462.

Metrics

CVSS 3.0 6.5/10CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-326

Affected software

No affected versions have been published.

Timeline

Published
Jun 7, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2016

CVE-2016-30205.5IBM Security Access Manager for Web 7.0.0, 8.0.0, and 9.0.0 could allow a remote attacker to bypass security restrictions, caused by impropeCVE-2016-30212.7IBM Security Access Manager for Web could allow an authenticated attacker to obtain sensitive information from error message using a specialCVE-2016-30226.5IBM Security Access Manager for Web could allow an authenticated user to gain access to highly sensitive information due to incorrect file pCVE-2016-30235.3IBM Security Access Manager for Web could allow an unauthenticated user to gain access to sensitive information by entering invalid file namCVE-2016-30244.0IBM Security Access Manager for Web allows web pages to be stored locally which can be read by another user on the system.CVE-2016-30258.1IBM Security Access Manager for Mobile 8.x before 8.0.1.4 IF3 and Security Access Manager 9.x before 9.0.1.0 IF5 do not properly restrict faCVE-2016-30276.5IBM Security Access Manager for Web is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when procesCVE-2016-30289.1IBM Security Access Manager for Web 7.0 before IF2 and 8.0 before 8.0.1.4 IF3 and Security Access Manager 9.0 before 9.0.1.0 IF5 allow remotCVE-2016-30298.8IBM Security Access Manager for Web is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unautCVE-2016-30315.4IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the WCVE-2016-30325.4IBM Cognos Analytics 11.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the WCVE-2016-30338.1IBM AppScan Source 8.7 through 9.0.3.3 allows remote authenticated users to read arbitrary files or cause a denial of service (memory consum
CVE-2016-3019: Medium severity, CVSS 6.5 | Vulnix