IBM Security Access Manager Vulnerability Allows Malicious Package Installation
CVE-2023-38370

6.5MEDIUM

Key Information:

Vendor
IBM
Vendor
CVE Published:
27 June 2024

Summary

The vulnerability presents a significant risk within IBM Security Access Manager Docker across multiple versions. Under specific configurations, it allows unauthorized users on the network to potentially install malicious packages, leading to a compromise of the system's security and integrity. This vulnerability underscores the critical importance of secure configuration management in preventing unauthorized access and ensuring the safety of sensitive data within organizational networks.

Affected Version(s)

Security Access Manager Docker 10.0.0.0 <= 10.0.7.1

References

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.