Code injection

IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the kernel to cause a denial of service. IBM X-Force ID: 267969...

Improper access control

IBM Security Access Manager Container IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.6.1 could allow a local user to obtain root access due to improper access controls. IBM X-Force ID: 254658...

Code injection

IBM Security Access Manager Container IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.6.1 temporarily stores sensitive information in files that could be accessed by a local user. IBM X-Force ID: 254653...

Code injection

IBM Security Access Manager Appliance IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.6.1 could allow a local user to obtain sensitive configuration information. IBM X-Force ID: 260584...

Code injection

IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the pmsvcs kernel extension to cause a denial of service. IBM X-Force ID: 267967...

CVE-2023-38267 IBM Security Access Manager Appliance information disclosure

IBM Security Access Manager Appliance IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.6.1 could allow a local user to possibly elevate their privileges due to sensitive configuration information being exposed. IBM X-Force ID: 260584...

CVE-2023-38267

CVE-2023-38267 affects IBM Security Verify Access products (Docker 10.0.0.0–10.0.6.1 and Appliance 10.0.0.0–10.0.6.1). The issue is that sensitive configuration information can be exposed to a local user, enabling potential privilege elevation. IBM’s bulletin lists this vulnerability among multip...

CVE-2023-31001 IBM Security Access Manager Container information disclosure

IBM Security Access Manager Container IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.6.1 temporarily stores sensitive information in files that could be accessed by a local user. IBM X-Force ID: 254653...

CVE-2023-31001

CVE-2023-31001 affects IBM Security Verify Access (ISVA) components: IBM Security Verify Access Docker 10.0.0.0–10.0.6.1 and ISVA Appliance 10.0.0.0–10.0.6.1. The issue is that the container/appliance could temporarily store sensitive information in files accessible to a local user, enabling loca...

CVE-2023-31003 IBM Security Access Manager Container privilege escalation

IBM Security Access Manager Container IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.6.1 could allow a local user to obtain root access due to improper access controls. IBM X-Force ID: 254658...

CVE-2023-31003

CVE-2023-31003 affects IBM Security Verify Access (ISVA) components: IBM Security Access Manager Container (10.0.0.0–10.0.6.1) and IBM Security Verify Access Appliance/Docker (10.0.0.0–10.0.6.1). The root cause is improper access controls that could let a local user obtain root access. Public sou...

CVE-2023-45175

IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the TCP/IP kernel extension to cause a denial of service. IBM X-Force ID: 267973...

CVE-2023-45173

IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the NFS kernel extension to cause a denial of service. IBM X-Force ID: 267971...

CVE-2023-45171

CVE-2023-45171 (IBM AIX / VIOS) AIX 7.2, 7.3, and VIOS 3.1 are affected by a kernel vulnerability that allows a non-privileged local user to cause a denial of service. Connected Red Hat advisory confirms the same CVE with no additional exploit specifics or patch details in the provided sources. T...

CVE-2023-45169 IBM AIX denial of service

IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the pmsvcs kernel extension to cause a denial of service. IBM X-Force ID: 267967...

CVE-2023-45169

CVE-2023-45169 affects IBM AIX 7.2, 7.3, and VIOS 3.1. Multiple sources (Red Hat advisory) identify exploitation in the pmsvcs kernel extension by a non-privileged local user to cause a denial of service. CVE entry notes this device class and impact; CVSS context is provided by NVD/IBM feeds (loc...

CVE-2023-45169 IBM AIX denial of service

IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the pmsvcs kernel extension to cause a denial of service. IBM X-Force ID: 267967...

CVE-2023-45173 IBM AIX denial of service

IBM AIX 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the NFS kernel extension to cause a denial of service. IBM X-Force ID: 267971...

CVE-2023-45173

CVE-2023-45173 affects IBM AIX 7.2, 7.3, and VIOS 3.1 via a vulnerability in the NFS kernel extension that could allow a non-privileged local user to cause a denial of service. Descriptions from multiple feeds (NVD, Red Hat advisory, CNVD) confirm the affected OS versions and the local, low-privi...

CVE-2023-45175

CVE-2023-45175 affects IBM AIX 7.2, 7.3, and VIOS 3.1. The issue is a denial-of-service vulnerability in the TCP/IP kernel extension that can be triggered by a non-privileged local user. The Red Hat advisory confirms the same CVE and product scope; no exploit details or active exploit status are ...