PT-2024-12253 · Ibm · Ibm Security Access Manager Container
CVE-2023-31002
·
Published
2024-02-07
·
Updated
2024-02-10
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
IBM Security Access Manager Container versions 10.0.0.0 through 10.0.6.1
Description
The issue is related to the temporary storage of sensitive information in files that could be accessed by a local user.
Recommendations
For versions 10.0.0.0 through 10.0.6.1, consider restricting access to sensitive files to minimize the risk of exploitation until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Cleartext Storage of Sensitive Information
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Ibm Security Access Manager Container