Medium severity6.2NVD Advisory· Published Jun 28, 2024· Updated Jun 17, 2026

CVE-2024-35137

Description

IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 could allow a local user to possibly elevate their privileges due to sensitive configuration information being exposed. IBM X-Force ID: 292413.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

IBM/Security Access Manager For Web 8.0 Firmware
cpe:2.3:a:ibm:security_access_manager:*:*:*:*:*:*:*:*
Range: >=10.0.0.0,<=10.0.7.1
IBM/Security Verify Accesscpe-rescue
cpe:2.3:a:ibm:security_verify_access_docker:10.0.0.0:*:*:*:*:*:*:*
Range: 10.0.0.0
IBM/Security Access Manager Dockerllm-create
Range: 10.0.0.0 - 10.0.7.1

Patches

Vulnerability mechanics

References

www.ibm.com/support/pages/node/7158790nvdVendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/292413nvdVDB Entry
seclists.org/fulldisclosure/2024/Nov/0nvd

News mentions

No linked articles in our index yet.

cvss	0.403
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000