CVE-2024-35137

IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 could allow a local user to possibly elevate their privileges due to sensitive configuration information being exposed. IBM X-Force ID: 292413...

CVE-2024-35139

CVE-2024-35139 affects IBM Security Access Manager Docker versions 10.0.0.0 through 10.0.7.1. The root cause is incorrect default permissions that allow a local user to obtain sensitive information from the container. Impact is information disclosure within the container. Remediation per sources ...

PT-2024-26331 · Ibm · Ibm Security Access Manager

Name of the Vulnerable Software and Affected Versions: IBM Security Access Manager Docker versions 10.0.0.0 through 10.0.7.1 Description: The issue allows a local user to possibly elevate their privileges due to sensitive configuration information being exposed. Recommendations: For versions...

CVE-2023-30998

IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 could allow a local user to obtain root access due to improper access controls. IBM X-Force ID: 254649...

CVE-2023-30997

IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 could allow a local user to obtain root access due to improper access controls. IBM X-Force ID: 254638...

CVE-2023-30997

IBM Security Access Manager (Docker) versions 10.0.0.0 through 10.0.7.1 are affected by CVE-2023-30997, a local privilege escalation due to improper access controls that could allow a local user to obtain root access. The issue is documented with a high impact (C/H/I/H/A/H) and local attack vecto...

CVE-2024-31883

IBM Security Verify Access 10.0.0.0 through 10.0.7.1, under certain configurations, could allow an unauthenticated attacker to cause a denial of service due to asymmetric resource consumption. IBM X-Force ID: 287615...

PT-2024-12719 · Ibm · Ibm Security Access Manager Docker

Name of the Vulnerable Software and Affected Versions: IBM Security Access Manager Docker versions 10.0.0.0 through 10.0.7.1 Description: The issue is related to the use of weaker than expected cryptographic algorithms, which could allow an attacker to decrypt highly sensitive information...

IBM Security Verify Access 安全漏洞

IBM Security Verify Access ISAM is a service from International Business Machines IBM that improves user access security. The service enables secure and simple access to platforms such as web, mobile, IoT and cloud technologies through the use of risk-based access, single sign-on, integrated acce...

PT-2024-12234 · Ibm · Ibm Security Verify Access

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Access versions 10.0.0 through 10.0.7.1 Description: The issue allows a local user to obtain sensitive information from trace logs. Recommendations: For IBM Security Verify Access versions 10.0.0 through 10.0.7.1, consider...