CVE-2023-38369mediumCWE-521

CVE-2023-38369: medium-severity vulnerability in IBM Security Verify Access Appliance

IBM Security Access Manager Container information disclosure

Published · Updated

Follow this CVE+ Monitor Security Verify Access Docker+ Monitor Security Verify Access Appliance

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.2epss 0.5%
IBM Security Access Manager Container 10.0.0.0 through 10.0.6.1 does not require that docker images should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 261196.
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
IBM · Security Verify Access ApplianceIBM · Security Verify Access Docker
Related CVEs — IBM Security Verify Access Appliance

In the same product, most dangerous first.

CVE-2021-20511MEDIUMCVE-2021-20511EPSS 1.9%CVE-2024-35133MEDIUMIBM Security Verify Access HTTP open redirectEPSS 1.8%CVE-2021-20533HIGHCVE-2021-20533EPSS 1.8%CVE-2024-31873HIGHIBM Security Verify Access Appliance information disclosureEPSS 1.2%CVE-2021-20439HIGHCVE-2021-20439EPSS 1.2%CVE-2023-30999HIGHIBM Security Access Manager denial of serviceEPSS 1.0%