IBM Security Access Manager Container privilege escalation

Vulnerability

IBM Security Verify Access Appliance versions 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.6.1 contain improper access controls in the container component, allowing a local user to obtain root access [1]. The vulnerability is triggered when a local user interacts with the affected system without requiring authentication or user interaction, as indicated by the CVSS vector (AV:L/AC:L/PR:N/UI:N) [1].

Exploitation

An attacker with local access to the system can exploit the improper access controls without any prior privileges or user interaction [1]. The attack complexity is low, meaning no special conditions are required beyond local access. The attacker can then execute commands or manipulate system resources to escalate privileges to root [1].

Impact

Successful exploitation grants the attacker root privileges, leading to full compromise of confidentiality, integrity, and availability of the affected system [1]. The attacker can access sensitive data, modify system configurations, and potentially disrupt services.

Mitigation

IBM has released security updates to address this vulnerability. Users should upgrade to a fixed version as specified in the IBM Security Bulletin [1]. No workarounds are documented, and the vulnerability is not listed on the CISA Known Exploited Vulnerabilities (KEV) catalog as per the available references.