Skip to content
OpenAdvisories
Medium WID-SEC-2024-1260 4 CVEs

IBM Security Verify Access: Mehrere Schwachstellen

Published May 30, 2024 · Updated May 30, 2024 · de-DE

Vendor: IBM Product: Security Verify Access

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in IBM Security Verify Access ausnutzen, um Informationen offenzulegen oder seine Berechtigungen zu erweitern.

Product

IBM Security Verify Access, ehemals IBM Security Access Manager (ISAM), ist eine Zugriffsverwaltungslösung.

Vulnerabilities 4

  • High 8.4
    CVE-2024-35142

    IBM Security Verify Access privilege escalation

    IBM Security Verify Access Docker 10.0.0 through 10.0.6 could allow a local user to escalate their privileges due to execution of unnecessary privileges. IBM X-Force ID: 292418.

    IBM Security Verify Access Docker
  • High 7.8
    CVE-2024-35141

    IBM Security Verify Access privilege escalation

    IBM Security Verify Access Docker 10.0.0 through 10.0.6 could allow a local user to escalate their privileges due to execution of unnecessary privileges.

    IBM Security Verify Access Docker
  • High 7.7
    CVE-2024-35140

    IBM Security Verify Access privilege escalation

    IBM Security Verify Access Docker 10.0.0 through 10.0.6 could allow a local user to escalate their privileges due to improper certificate validation. IBM X-Force ID: 292416.

    IBM Security Verify Access Docker
  • Medium 4.0
    CVE-2024-22338

    IBM Security Verify Access OIDC Provider information disclosure

    IBM Security Verify Access OIDC Provider 22.09 through 23.03 could disclose sensitive information to a local user due to hazardous input validation. IBM X-Force ID: 279978.

    IBM Security Verify Access OIDC Provider

Revision history

  1. #1

    Initiale Fassung

References