cbcvebase.
CVE-2023-38370
published 2024-06-27

CVE-2023-38370: IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1, under certain configurations, could allow a user on the network to install malicious packages…

medium6.5CVSS 3.1
AVNACLPRLUINSUCNIHAN
IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1, under certain configurations, could allow a user on the network to install malicious packages. IBM X-Force ID: 261197.

Affected

2 ranges
VendorProductVersion rangeFixed in
ibmsecurity_access_manager10.0.0.0 – 10.0.7.1
ibmsecurity_access_manager_docker10.0.0.0 – 10.0.7.1
CVE-2023-38370 — Incorrect Default Permissions in IBM | cvebase