CVE Vulnerabilities

CVE-2023-31005

Improper Privilege Management

Published: Feb 03, 2024 | Modified: Feb 07, 2024
CVSS 3.x
7.8
HIGH
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1) could allow a local user to escalate their privileges due to an improper security configuration. IBM X-Force ID: 254767.

Weakness

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Affected Software

Name Vendor Start Version End Version
Security_verify_access Ibm 10.0.0.0 (including) 10.0.6.1 (including)
Security_verify_access_docker Ibm 10.0.0.0 (including) 10.0.6.1 (including)

Potential Mitigations

References