IBM Security Access Manager Vulnerability Allows Malicious Package Installation
CVE-2023-38370

7.5HIGH

Key Information:

Vendor

IBM
Status
Security Access Manager Docker
Vendor
CVE Published:
27 June 2024

What is CVE-2023-38370?

The vulnerability presents a significant risk within IBM Security Access Manager Docker across multiple versions. Under specific configurations, it allows unauthorized users on the network to potentially install malicious packages, leading to a compromise of the system's security and integrity. This vulnerability underscores the critical importance of secure configuration management in preventing unauthorized access and ensuring the safety of sensitive data within organizational networks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Security Access Manager Docker 10.0.0.0 <= 10.0.7.1

References

https://www.ibm.com/support/pages/node/7158790
vendor-advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/261197

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.