CVE-2016-3025

IBM Security Access Manager for Mobile 8.x before 8.0.1.4 IF3 and Security Access Manager 9.x before 9.0.1.0 IF5 do not properly restrict failed login attempts, which makes it easier for remote attackers to obtain access via a brute-force approach.

• CWE-254

• http://www-01.ibm.com/support/docview.wss?uid=swg1IV89240Broken Link
• http://www-01.ibm.com/support/docview.wss?uid=swg1IV89258Broken Link
• http://www-01.ibm.com/support/docview.wss?uid=swg21991107Vendor Advisory
• http://www.securityfocus.com/bid/93178
• http://www-01.ibm.com/support/docview.wss?uid=swg1IV89240Broken Link
• http://www-01.ibm.com/support/docview.wss?uid=swg1IV89258Broken Link
• http://www-01.ibm.com/support/docview.wss?uid=swg21991107Vendor Advisory
• http://www.securityfocus.com/bid/93178

Published

Nov 25, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-3019IBM Security Access Manager for Web 9.0.0 uses weaker than e…
• CVE-2016-3020IBM Security Access Manager for Web 7.0.0, 8.0.0, and 9.0.0 …
• CVE-2016-3021IBM Security Access Manager for Web could allow an authentic…
• CVE-2016-3022IBM Security Access Manager for Web could allow an authentic…6.5
• CVE-2016-3023IBM Security Access Manager for Web could allow an unauthent…
• CVE-2016-3024IBM Security Access Manager for Web allows web pages to be s…
• CVE-2016-3027IBM Security Access Manager for Web is vulnerable to a denia…
• CVE-2016-3028IBM Security Access Manager for Web 7.0 before IF2 and 8.0 b…
• CVE-2016-3029IBM Security Access Manager for Web is vulnerable to cross-s…
• CVE-2016-3031IBM Cognos Analytics 11.0 is vulnerable to cross-site script…
• CVE-2016-3032IBM Cognos Analytics 11.0 is vulnerable to cross-site script…
• CVE-2016-3033IBM AppScan Source 8.7 through 9.0.3.3 allows remote authent…