Weaker Cryptographic Algorithms in IBM Security Access Manager Docker Releases Could Lead to Information Decryption

CVE-2023-38371

What is CVE-2023-38371?

IBM Security Access Manager Docker versions 10.0.0.0 through 10.0.7.1 exhibit vulnerabilities due to the implementation of cryptographic algorithms that do not meet expected security standards. This weakness may allow attackers to decrypt highly sensitive information, posing significant risks to data confidentiality. Organizations utilizing these affected versions should review their security configurations and consider updates or mitigations to safeguard sensitive data against potential unauthorized access.

References