CVE-2023-31003

IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.6.1) could allow a local user to obtain root access due to improper access controls. IBM X-Force ID: 254658.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ibm:security_verify_access:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:security_verify_access_docker:*:*:*:*:*:*:*:*

History

21 Nov 2024, 08:01

Type Values Removed Values Added
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/254658 - VDB Entry () https://exchange.xforce.ibmcloud.com/vulnerabilities/254658 - VDB Entry
References () https://www.ibm.com/support/pages/node/7106586 - Patch, Vendor Advisory () https://www.ibm.com/support/pages/node/7106586 - Patch, Vendor Advisory
CVSS v2 : unknown
v3 : 7.8
v2 : unknown
v3 : 8.4

18 Jan 2024, 17:06

Type Values Removed Values Added
CPE cpe:2.3:a:ibm:security_verify_access:*:*:*:*:*:*:*:*
cpe:2.3:a:ibm:security_verify_access_docker:*:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.8
References () https://www.ibm.com/support/pages/node/7106586 - () https://www.ibm.com/support/pages/node/7106586 - Patch, Vendor Advisory
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/254658 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/254658 - VDB Entry
CWE CWE-59
First Time Ibm security Verify Access Docker
Ibm
Ibm security Verify Access

11 Jan 2024, 03:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-01-11 03:15

Updated : 2024-11-21 08:01


NVD link : CVE-2023-31003

Mitre link : CVE-2023-31003

CVE.ORG link : CVE-2023-31003


JSON object : View

Products Affected

ibm

  • security_verify_access
  • security_verify_access_docker
CWE
CWE-59

Improper Link Resolution Before File Access ('Link Following')