8.1
CVE-2016-3025
- EPSS 0.54%
- Published 25.11.2016 03:59:06
- Last modified 12.04.2025 10:46:40
- Source psirt@us.ibm.com
- Teams watchlist Login
- Open Login
IBM Security Access Manager for Mobile 8.x before 8.0.1.4 IF3 and Security Access Manager 9.x before 9.0.1.0 IF5 do not properly restrict failed login attempts, which makes it easier for remote attackers to obtain access via a brute-force approach.
Data is provided by the National Vulnerability Database (NVD)
Ibm ≫ Security Access Manager Version9.0.0
Ibm ≫ Security Access Manager Version9.0.0.1
Ibm ≫ Security Access Manager Version9.0.1.0
Ibm ≫ Security Access Manager For Mobile Version8.0.0.0
Ibm ≫ Security Access Manager For Mobile Version8.0.0.1
Ibm ≫ Security Access Manager For Mobile Version8.0.0.2
Ibm ≫ Security Access Manager For Mobile Version8.0.0.3
Ibm ≫ Security Access Manager For Mobile Version8.0.0.4
Ibm ≫ Security Access Manager For Mobile Version8.0.0.5
Ibm ≫ Security Access Manager For Mobile Version8.0.1
Ibm ≫ Security Access Manager For Mobile Version8.0.1.2
Ibm ≫ Security Access Manager For Mobile Version8.0.1.3
Ibm ≫ Security Access Manager For Mobile Version8.0.1.4
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.54% | 0.648 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 8.1 | 2.2 | 5.9 |
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:P/I:N/A:N
|