CVE-2023-32329

2024-02-0301:15:08

CWE-345

[email protected]

web.nvd.nist.gov

ibm

security access manager

container

file validation

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

AI Score

6.4

Confidence

High

EPSS

Percentile

9.0%

JSON

IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1) could allow a user to download files from an incorrect repository due to improper file validation. IBM X-Force ID: 254972.

Affected configurations

Nvd

Node

ibmsecurity_verify_accessRange10.0.0.0–10.0.6.1

ibmsecurity_verify_access_dockerRange10.0.0.0–10.0.6.1

VendorProductVersionCPE
ibmsecurity_verify_access*cpe:2.3:a:ibm:security_verify_access:*:*:*:*:*:*:*:*
ibmsecurity_verify_access_docker*cpe:2.3:a:ibm:security_verify_access_docker:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	security_verify_access	*	cpe:2.3:a:ibm:security_verify_access::::::::
ibm	security_verify_access_docker	*	cpe:2.3:a:ibm:security_verify_access_docker::::::::