CVE-2025-1411

IBM Security Verify Directory Container 10.0.0.0 through 10.0.3.1 could allow a local user to execute commands as root due to execution with unnecessary privileges...

CVE-2024-35137

IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 could allow a local user to possibly elevate their privileges due to sensitive configuration information being exposed. IBM X-Force ID: 292413...

CVE-2024-35139

CVE-2024-35139 affects IBM Security Access Manager Docker versions 10.0.0.0 through 10.0.7.1. The root cause is incorrect default permissions that allow a local user to obtain sensitive information from the container. Impact is information disclosure within the container. Remediation per sources ...

PT-2024-26331 · Ibm · Ibm Security Access Manager

Name of the Vulnerable Software and Affected Versions: IBM Security Access Manager Docker versions 10.0.0.0 through 10.0.7.1 Description: The issue allows a local user to possibly elevate their privileges due to sensitive configuration information being exposed. Recommendations: For versions...

CVE-2023-30998

IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 could allow a local user to obtain root access due to improper access controls. IBM X-Force ID: 254649...

CVE-2023-30998

IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 could allow a local user to obtain root access due to improper access controls. IBM X-Force ID: 254649...

CVE-2023-30997

IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 could allow a local user to obtain root access due to improper access controls. IBM X-Force ID: 254638...

CVE-2023-30997

IBM Security Access Manager (Docker) versions 10.0.0.0 through 10.0.7.1 are affected by CVE-2023-30997, a local privilege escalation due to improper access controls that could allow a local user to obtain root access. The issue is documented with a high impact (C/H/I/H/A/H) and local attack vecto...

CVE-2024-31883

IBM Security Verify Access 10.0.0.0 through 10.0.7.1, under certain configurations, could allow an unauthenticated attacker to cause a denial of service due to asymmetric resource consumption. IBM X-Force ID: 287615...

PT-2024-12719 · Ibm · Ibm Security Access Manager Docker

Name of the Vulnerable Software and Affected Versions: IBM Security Access Manager Docker versions 10.0.0.0 through 10.0.7.1 Description: The issue is related to the use of weaker than expected cryptographic algorithms, which could allow an attacker to decrypt highly sensitive information...

IBM Security Verify Access 安全漏洞

IBM Security Verify Access ISAM is a service from International Business Machines IBM that improves user access security. The service enables secure and simple access to platforms such as web, mobile, IoT and cloud technologies through the use of risk-based access, single sign-on, integrated acce...

CVE-2023-31002

IBM Security Access Manager Container 10.0.0.0 through 10.0.6.1 temporarily stores sensitive information in files that could be accessed by a local user. IBM X-Force ID: 254657...

CVE-2023-31002

CVE-2023-31002 affects IBM Security Verify Access (Docker container 10.0.0.0–10.0.6.1 and Appliance 10.0.0.0–10.0.6.1). The Red Hat and IBM bulletins confirm that the vulnerability stems from temporarily stored sensitive information in files that could be accessed by a local user, enabling inform...

CVE-2023-43017

CVE-2023-43017 affects IBM Security Verify Access 10.0.0.0–10.0.6.1. Description: a privileged user could install a configuration file that could allow remote access (high impact). Affected products include IBM Security Verify Access Docker (10.0.0.0–10.0.6.1) and Appliance (10.0.0.0–10.0.6.1). R...

PT-2024-12253 · Ibm · Ibm Security Access Manager Container

Name of the Vulnerable Software and Affected Versions: IBM Security Access Manager Container versions 10.0.0.0 through 10.0.6.1 Description: The issue is related to the temporary storage of sensitive information in files that could be accessed by a local user. Recommendations: For versions 10.0.0...

CVE-2023-32329

IBM Security Access Manager Container IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1 could allow a user to download files from an incorrect repository due to improper file validation. IBM X-Force ID: 254972...

PT-2024-12252 · Ibm · Ibm Security Verify Access Appliance +1

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Access Appliance versions 10.0.0.0 through 10.0.6.1 IBM Security Verify Access Docker versions 10.0.0.0 through 10.0.6.1 Description: The issue could allow an attacker to cause a denial of service due to uncontrolled...

PT-2024-12256 · Ibm · Ibm Security Verify Access Appliance +1

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Access Appliance versions 10.0.0.0 through 10.0.6.1 IBM Security Verify Access Docker versions 10.0.0.0 through 10.0.6.1 Description: The issue is related to denial of service attacks on the DSC server. Recommendations: Fo...

PT-2024-12315 · Ibm · Ibm Security Verify Access Appliance +1

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Access Appliance versions 10.0.0.0 through 10.0.6.1 IBM Security Verify Access Docker versions 10.0.0.0 through 10.0.6.1 Description: The issue is due to improper file validation, which could allow a user to download files...

PT-2024-12255 · Ibm · Ibm Security Verify Access Appliance +1

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Access Appliance versions 10.0.0.0 through 10.0.6.1 IBM Security Verify Access Docker versions 10.0.0.0 through 10.0.6.1 Description: The issue is due to an improper security configuration, which could allow a local user t...