IBM Security Access Manager Container vulnerabilities

2 CVEs affecting IBM Security Access Manager Container, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-38369, published 2024-02-07.

More from IBM.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-38369, published 2024-02-07. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. IBM Security Access Manager Container 10.0.0.0 through 10.0.6.1 does not require that docker images should have strong passwords by default, which makes it easier for attackers to compromise user…
• CVE-2023-31002, published 2024-02-07. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. IBM Security Access Manager Container 10.0.0.0 through 10.0.6.1 temporarily stores sensitive information in files that could be accessed by a local user. IBM X-Force ID: 254657.