CVE-2023-38369
6.2
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Summary
IBM Security Access Manager Container 10.0.0.0 through 10.0.6.1 does not require that docker images should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 261196.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| IBM | Security Verify Access Appliance | 10.0.0.0 <= 10.0.6.1 | affected |
| IBM | Security Verify Access Docker | 10.0.0.0 <= 10.0.6.1 | affected |
Weaknesses
- CWE-521: CWE-521 Weak Password Requirements
ADP Enrichment
CVE Program Container
Additional References
- https://www.ibm.com/support/pages/node/7106586
- https://exchange.xforce.ibmcloud.com/vulnerabilities/261196
- http://seclists.org/fulldisclosure/2024/Nov/0
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: partial
References
- https://www.ibm.com/support/pages/node/7106586
- https://exchange.xforce.ibmcloud.com/vulnerabilities/261196
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.