📦 Security Access Manager

by Ibm

🔍 What is Security Access Manager?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2020-4499

CRITICAL CVSS 9.8 Oct 15, 2020

This vulnerability allows unauthorized OAuth clients to bypass authentication checks in IBM Security Access Manager and IBM Security Verify Access. Attackers could gain unauthorized access to protecte...

CVE-2023-38370

HIGH CVSS 7.5 Jun 27, 2024

IBM Security Access Manager Docker containers (versions 10.0.0.0 through 10.0.7.1) with certain configurations allow network users to install malicious packages. This could lead to unauthorized code e...

CVE-2023-30997

HIGH CVSS 7.8 Jun 27, 2024

This vulnerability in IBM Security Access Manager Docker allows a local user to escalate privileges to root due to improper access controls. It affects versions 10.0.0.0 through 10.0.7.1. Any system r...

CVE-2021-20439

HIGH CVSS 7.5 Jul 15, 2021

IBM Security Access Manager 9.0 and IBM Security Verify Access Docker 10.0.0 store user credentials in plain text, allowing unauthorized users to read sensitive authentication data. This affects organ...

CVE-2024-35139

MEDIUM CVSS 6.2 Jun 28, 2024

This vulnerability in IBM Security Access Manager Docker allows local users to access sensitive information within the container due to incorrect default permissions. It affects IBM Security Access Ma...

CVE-2023-38368

MEDIUM CVSS 5.5 Jun 27, 2024

IBM Security Access Manager Docker versions 10.0.0.0 through 10.0.7.1 have improper permission controls that could allow local users to access sensitive information. This vulnerability affects organiz...