Weaker Cryptographic Algorithms in IBM Security Access Manager Docker Releases Could Lead to Information Decryption
CVE-2023-38371

5.9MEDIUM

Key Information:

Vendor

IBM
Status
Security Access Manager Docker
Vendor
CVE Published:
27 June 2024

What is CVE-2023-38371?

IBM Security Access Manager Docker versions 10.0.0.0 through 10.0.7.1 exhibit vulnerabilities due to the implementation of cryptographic algorithms that do not meet expected security standards. This weakness may allow attackers to decrypt highly sensitive information, posing significant risks to data confidentiality. Organizations utilizing these affected versions should review their security configurations and consider updates or mitigations to safeguard sensitive data against potential unauthorized access.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Security Access Manager Docker 10.0.0.0 <= 10.0.7.1

References

https://www.ibm.com/support/pages/node/7158790
vendor-advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/261198

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.