CVE-2023-43016CWE-258

IBM Security Access Manager Container unauthorized access

High · published February 3, 2024

CVSS v3.1
7.3
EPSS
1%
Percentile
53.1
In the wild
Unconfirmed
What it is

IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1) could allow a remote user to log into the server due to a user account with an empty password. IBM X-Force ID: 266154.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00713 · 53.1th percentile
Weakness
CWE-258 · Empty Password in Configuration File
Published
2024-02-03T00:55Z
EPSS history
Timeline
  • 03 FEB 00:55Z
    IBM Security Access Manager Container unauthorized access
    cvelistv5