CVE-2023-38371 — IBM Security Access Manager Docker information disclosure

CVE-2023-38371

IBM Security Access Manager Docker information disclosure PUBLISHED

Description (CNA)

IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 261198.

Affected (CNA)

Vendor / product	Versions
IBM / Security Access Manager Docker	affected 10.0.0.0 through 10.0.7.1

CWE

CWE-327

References

https://www.ibm.com/support/pages/node/7158790
https://exchange.xforce.ibmcloud.com/vulnerabilities/261198

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.

https://www.ibm.com/support/pages/node/7158790
https://exchange.xforce.ibmcloud.com/vulnerabilities/261198
http://seclists.org/fulldisclosure/2024/Nov/1
http://seclists.org/fulldisclosure/2024/Nov/0