CVE-2023-43016

IBM Security Access Manager Container unauthorized access

CVSS 7.3 HIGHEPSS 0.7%CWE-258

IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1) could allow a remote user to log into the server due to a user account with an empty password. IBM X-Force ID: 266154.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Productos afectados

IBM · Security Verify Access Appliance IBM · Security Verify Access Docker

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

http://seclists.org/fulldisclosure/2024/Nov/0 https://exchange.xforce.ibmcloud.com/vulnerabilities/266154 https://www.ibm.com/support/pages/node/7106586