CVE-2016-3043

IBM Security Access Manager for Web could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques.

• CWE-200

• http://www.ibm.com/support/docview.wss?uid=swg21995446Patch, Vendor Advisory
• http://www.securityfocus.com/bid/95107Third Party Advisory, VDB Entry
• http://www.ibm.com/support/docview.wss?uid=swg21995446Patch, Vendor Advisory
• http://www.securityfocus.com/bid/95107Third Party Advisory, VDB Entry

Published

Feb 1, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-3036IBM Cognos TM1 10.1 and 10.2 is vulnerable to a denial of se…
• CVE-2016-3037IBM Cognos TM1 10.1 and 10.2 provides a service to return th…
• CVE-2016-3038IBM Cognos TM1 10.1 and 10.2 is vulnerable to cross-site scr…
• CVE-2016-3039IBM Traveler 8.x and 9.x before 9.0.1.12 allows remote authe…
• CVE-2016-3040IBM WebSphere Application Server (WAS) Liberty, as used in I…
• CVE-2016-3042Cross-site scripting (XSS) vulnerability in the Web UI in IB…
• CVE-2016-3044The Linux kernel component in IBM PowerKVM 2.1 before 2.1.1.…
• CVE-2016-3045IBM Security Access Manager for Web stores sensitive informa…
• CVE-2016-3046IBM Security Access Manager for Web is vulnerable to SQL inj…
• CVE-2016-3047Open redirect vulnerability in IBM FileNet Workplace 4.0.2 t…
• CVE-2016-3048IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 is vulnerable t…
• CVE-2016-3049IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 is vulnerable t…