IBM Security Bulletin: IBM Security Access Manager appliances are affected by an information exposure vulnerability (CVE-2016-3043)

IBM Security Access Manager appliances could allow a remote attacker to obtain sensitive information by using man in the middle techniques.

CVE(s): CVE-2016-3043

Affected product(s) and affected version(s):

IBM Security Access Manager for Web 7.0 appliances, all firmware versions.

IBM Security Access Manager for Web 8.0 appliances, all firmware versions.

IBM Security Access Manager for Mobile 8.0 appliances, all firmware versions.

IBM Security Access Manager 9.0 appliances, all firmware versions.

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2hxC5bU
X-Force Database: http://ift.tt/2hACfwu

from IBM Product Security Incident Response Team http://ift.tt/2hxG3S0