Vulnerabilities > IBM > Security Verify Access > 10.0.0.6

DATE CVE VULNERABILITY TITLE RISK
2024-01-11 CVE-2023-31001 Storing Passwords in a Recoverable Format vulnerability in IBM products
IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.6.1) temporarily stores sensitive information in files that could be accessed by a local user.
local
low complexity
ibm CWE-257
5.5
2024-01-11 CVE-2023-31003 Link Following vulnerability in IBM products
IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.6.1) could allow a local user to obtain root access due to improper access controls.
local
low complexity
ibm CWE-59
7.8
2024-01-11 CVE-2023-38267 Missing Encryption of Sensitive Data vulnerability in IBM products
IBM Security Access Manager Appliance (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.6.1) could allow a local user to obtain sensitive configuration information.
local
low complexity
ibm CWE-311
5.5