CVE-2016-3045

IBM Security Access Manager for Web stores sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referer header or browser history.

• CWE-200

• http://www.ibm.com/support/docview.wss?uid=swg21995435Patch, Vendor Advisory
• http://www.securityfocus.com/bid/95103Third Party Advisory, VDB Entry
• http://www.ibm.com/support/docview.wss?uid=swg21995435Patch, Vendor Advisory
• http://www.securityfocus.com/bid/95103Third Party Advisory, VDB Entry

Published

Feb 1, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-3038IBM Cognos TM1 10.1 and 10.2 is vulnerable to cross-site scr…
• CVE-2016-3039IBM Traveler 8.x and 9.x before 9.0.1.12 allows remote authe…
• CVE-2016-3040IBM WebSphere Application Server (WAS) Liberty, as used in I…
• CVE-2016-3042Cross-site scripting (XSS) vulnerability in the Web UI in IB…
• CVE-2016-3043IBM Security Access Manager for Web could allow a remote att…
• CVE-2016-3044The Linux kernel component in IBM PowerKVM 2.1 before 2.1.1.…
• CVE-2016-3046IBM Security Access Manager for Web is vulnerable to SQL inj…
• CVE-2016-3047Open redirect vulnerability in IBM FileNet Workplace 4.0.2 t…
• CVE-2016-3048IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 is vulnerable t…
• CVE-2016-3049IBM OpenPages GRC Platform 7.1, 7.2, and 7.3 is vulnerable t…
• CVE-2016-3051IBM Security Access Manager for Web 9.0.0 could allow an aut…
• CVE-2016-3052Under non-standard configurations, IBM WebSphere MQ might se…