VULNERABILITY INTELLIGENCE

CVE-2023-38369

CVSS score6.2 MEDIUM
EPSS probability0.53%
CISA KEVNot currently listed
Published2024-02-07
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

IBM Security Access Manager Container 10.0.0.0 through 10.0.6.1 does not require that docker images should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 261196.

Weakness classification

  • CWE-521: Weak Password Requirements

Primary references