← back
CVE-2023-30999

IBM Security Access Manager denial of service

CVSS 7.5 HIGHEPSS 1.0%CWE-400
Vexday Risk Score
21Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 7.5EPSS 1.0%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado
Lifecycle
03 Feb 2024Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1) could allow an attacker to cause a denial of service due to uncontrolled resource consumption. IBM X-Force ID: 254651.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
IBM · Security Verify Access ApplianceIBM · Security Verify Access Docker

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://seclists.org/fulldisclosure/2024/Nov/0https://exchange.xforce.ibmcloud.com/vulnerabilities/254651https://www.ibm.com/support/pages/node/7106586