CVE-2023-38371: IBM Security Access Manager Docker information disclosure
IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 261198.
Other sources
IBM Security Access Manager uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-38371?
CVE-2023-38371 is classified as a significant vulnerability due to the use of weaker than expected cryptographic algorithms.
How do I fix CVE-2023-38371?
To mitigate CVE-2023-38371, upgrade IBM Security Access Manager to version 10.0.7.2 or later where stronger cryptographic algorithms are implemented.
What products are affected by CVE-2023-38371?
CVE-2023-38371 affects IBM Security Verify Access Docker versions 10.0.0.0 through 10.0.7.1 and IBM Security Access Manager within the same version range.
What are the potential impacts of CVE-2023-38371?
If exploited, CVE-2023-38371 could allow an attacker to decrypt highly sensitive information stored by the affected products.
Is there a workaround for CVE-2023-38371 while I wait to upgrade?
There are no formal workarounds for CVE-2023-38371, so it is highly recommended to upgrade to a secure version as soon as possible.