IBM Security Access Manager Container information disclosure

Vulnerability

IBM Security Access Manager Container versions 10.0.0.0 through 10.0.6.1 do not enforce strong passwords for docker images by default [1]. This allows the use of weak or default credentials for user accounts within the containerized deployment.

Exploitation

An attacker with network access to the container can attempt to authenticate using common weak passwords or default credentials that were not changed during deployment. No special privileges or user interaction is required beyond the ability to reach the authentication interface.

Impact

Successful exploitation leads to compromise of user accounts, potentially granting the attacker unauthorized access to the IBM Security Access Manager Container environment. This could result in information disclosure or further lateral movement within the network.

Mitigation

IBM has addressed this vulnerability in security updates for IBM Security Verify Access [1]. Users should upgrade to a fixed version as specified in the vendor advisory. As a workaround, administrators should enforce strong password policies and change any default credentials immediately.