CVE-2023-38368: IBM Security Access Manager Docker information disclosure
IBM Security Access Manager Container could disclose sensitive information to a local user to do improper permission controls.
Other sources
IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 could disclose sensitive information to a local user to do improper permission controls. IBM X-Force ID: 261195.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-38368?
CVE-2023-38368 is considered a high severity vulnerability due to its potential to disclose sensitive information.
How do I fix CVE-2023-38368?
To address CVE-2023-38368, upgrade IBM Security Access Manager Docker to version 10.0.8 or later.
Who is affected by CVE-2023-38368?
CVE-2023-38368 affects IBM Security Verify Access Docker versions 10.0.0.0 through 10.0.7.1.
What type of information does CVE-2023-38368 disclose?
CVE-2023-38368 could disclose sensitive information due to improper permission controls.
Can CVE-2023-38368 affect local users?
Yes, CVE-2023-38368 could allow local users to access sensitive information unintentionally.