CVE-2023-32327: IBM Security Access Manager Container XML external entity injection
IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1) is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 254783.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2023-32327?
CVE-2023-32327 has a high severity rating due to its potential for remote exploitation via XML External Entity Injection.
How do I fix CVE-2023-32327?
To mitigate the impact of CVE-2023-32327, it is advised to upgrade IBM Security Access Manager and Docker to versions later than 10.0.6.1.
Which products are affected by CVE-2023-32327?
CVE-2023-32327 affects IBM Security Verify Access Appliance and IBM Security Verify Access Docker versions from 10.0.0.0 to 10.0.6.1.
What is an XML External Entity Injection (XXE) attack as related to CVE-2023-32327?
An XML External Entity Injection (XXE) attack allows an attacker to interfere with the processing of XML data, potentially leading to unauthorized access or data exposure.
Can CVE-2023-32327 be exploited remotely?
Yes, a remote attacker can exploit CVE-2023-32327 if the affected software is vulnerable and accessible.