PT-2024-12717
CVE-2023-38369
·
تاريخ النشر
2024-02-07
·
تاريخ التحديث
2024-02-10
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions
IBM Security Access Manager Container versions 10.0.0.0 through 10.0.6.1
Description
The issue arises from the lack of a requirement for strong passwords in docker images by default, making it easier for attackers to compromise user accounts.
Recommendations
For versions 10.0.0.0 through 10.0.6.1, consider configuring docker images to use strong passwords to mitigate the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾