Skip to content
CVE Tracker
Back

CVE-2016-3034

IBM AppScan Source uses a one-way hash without salt to encrypt highly sensitive information, which could allow a local attacker to decrypt…

Medium4.4EPSS 0.21%
Published
Updated
Reserved
Assigned by
ibm

Description

IBM AppScan Source uses a one-way hash without salt to encrypt highly sensitive information, which could allow a local attacker to decrypt information more easily.

Scores

CVSS scores of CVE-2016-3034, by who scored it
Scored byCVSSScoreVector
NVDNVD · Modified3.0Medium4.4CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
EPSS (exploitation in 30 days)
0.21% · top 88% of all CVEs (2 Nov 2026)

Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 4.4.

Weakness

Affected products

  • IBM Corporation · AppScan Source

    • affected 7.0
    • affected 8.0
    • affected 8.0.0.1
    • affected 8.0.0.2
    • affected 8.5
    • affected 8.5.0.1
    • affected 8.6
    • affected 8.7
    • affected 8.8
    • affected 9.0
    • affected 9.0.1
    • affected 8.6.0.2
    • affected 8.6.0.1
    • affected 8.7.0.1
    • affected 9.0.0.1
    • affected 9.0.2
    • affected 9.0.3.2
    • affected 9.0.3
    • affected 9.0.3.1
    • affected 9.0.3.3
    • affected 9.0.3.4
    • affected 9.0.3.5

References (2)

Sources

The same CVE in the primary databases and aggregators, to check against.

Record last updated .