Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Advisory: IBM Security Access Manager Docker — ibm.com/support/pages/node/7158790 Clear all filters
TI-2023-19759 CVE-2023-38370 · GHSA-47wp-r97g-7q4m

IBM Security Access Manager Docker information disclosure

Priority LOW 36

IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1, under certain configurations, could allow a user on the network to install malicious packages.

CVSS 3.1HIGH 7.5 Adjacent network No auth No interaction EPSS 0.00705 Published 2024-06-27 No fix listed CWE-276
TI-2023-19757 CVE-2023-38368 · GHSA-57rx-38pp-c45g

IBM Security Access Manager Docker information disclosure

Priority LOW 24

IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 could disclose sensitive information to a local user to do improper permission controls.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00186 Published 2024-06-27 No fix listed CWE-863
TI-2023-14735 CVE-2023-30997 · GHSA-5jrp-h5qf-wgc4

IBM Security Access Manager Docker privilege escalation

Priority LOW 36

IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 could allow a local user to obtain root access due to improper access controls.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00231 Published 2024-06-27 No fix listed CWE-250
TI-2023-14736 CVE-2023-30998 · GHSA-726j-mj58-vjqp

IBM Security Access Manager Docker privilege escalation

Priority LOW 36

IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 could allow a local user to obtain root access due to improper access controls.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00231 Published 2024-06-27 No fix listed CWE-250
TI-2023-19760 CVE-2023-38371 · GHSA-7jwq-45p5-2xh3

IBM Security Access Manager Docker information disclosure

Priority LOW 33

IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00461 Published 2024-06-27 No fix listed CWE-327