CVE-2023-30998: IBM Security Access Manager Docker privilege escalation
IBM Security Access Manager Container could allow a local user to obtain root access due to improper access controls.
Other sources
IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 could allow a local user to obtain root access due to improper access controls. IBM X-Force ID: 254649.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-30998?
CVE-2023-30998 is considered high severity due to the potential for local users to gain root access.
How do I fix CVE-2023-30998?
To fix CVE-2023-30998, update IBM Security Access Manager Docker to a version later than 10.0.7.1.
Which versions of IBM Security Access Manager are affected by CVE-2023-30998?
CVE-2023-30998 affects IBM Security Access Manager Docker versions 10.0.0.0 through 10.0.7.1.
What risk does CVE-2023-30998 pose to my system?
CVE-2023-30998 poses a significant risk as it allows local users to potentially obtain root privileges, compromising system security.
Is there a workaround for CVE-2023-30998 before applying the update?
Currently, there are no documented workarounds for CVE-2023-30998, and applying the update is the recommended course of action.