CVE-2023-31004

High

Description

IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1) could allow a remote attacker to gain access to the underlying system using man in the middle techniques. IBM X-Force ID: 254765.

SeverityHigh
CVSS8.3
Exploit probability—
ProductIbm Security Verify Access
PublishedFeb 3, 2024
First seenFeb 3, 2024
Weakness typeCWE-300CWE-300

How to fix

Affected products

ProductAffected versionsFixed in
ibm security_verify_access10.0.0.0 ≤ v ≤ 10.0.6.1—
ibm security_verify_access_docker10.0.0.0 ≤ v ≤ 10.0.6.1—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.