CVE-2023-31003CWE-59

IBM Security Access Manager Container privilege escalation

High · published January 11, 2024

CVSS v3.1
8.4
EPSS
0%
Percentile
15.1
In the wild
Unconfirmed
What it is

IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.6.1) could allow a local user to obtain root access due to improper access controls. IBM X-Force ID: 254658.

The record
Technical detail
CVSS v3.1
8.4 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00247 · 15.1th percentile
Weakness
CWE-59 · Improper Link Resolution Before File Access ('Link Following')
Published
2024-01-11T02:22Z
EPSS history
Timeline
  • 11 JAN 02:22Z
    IBM Security Access Manager Container privilege escalation
    cvelistv5