IBM Security Access Manager Container gain access

Vulnerability

IBM Security Access Manager Container (IBM Security Verify Access Appliance and Docker versions 10.0.0.0 through 10.0.6.1) could allow a remote attacker to gain access to the underlying system using man-in-the-middle techniques. This vulnerability is identified by IBM X-Force ID 254765 [1].

Exploitation

To exploit this vulnerability, an attacker must be able to intercept network traffic between the IBM Security Verify Access container and legitimate services. The attacker then manipulates the communication to gain unauthorized access. No authentication is required from the attacker, and the attack vector is network-based [1].

Impact

If successfully exploited, a remote, unauthenticated attacker could gain access to the underlying system, potentially leading to complete compromise of confidentiality, integrity, and availability of the affected system [1].

Mitigation

IBM recommends upgrading to IBM Security Verify Access Appliance and Docker versions 10.0.6.1 or later to address this vulnerability. The fix was made available as part of a security bulletin published February 1, 2024 [1].