← Back

CVE-2023-43016

nvd nist
Published: Feb 3, 2024Modified: Jun 17, 2026

JSON object

Loading...
7.3
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Exploitability: 3.9 / Impact: 3.4
Source: NVD

Description

IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1) could allow a remote user to log into the server due to a user account with an empty password. IBM X-Force ID: 266154.

Affected (2)

Ibm
2 products
Security Verify Access
Security Verify Access Docker
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Security Verify Access
From 10.0.0.0 to 10.0.6.1
Security Verify Access Docker
From 10.0.0.0 to 10.0.6.1

Related CWEs

CWE-258
Empty Password in Configuration File
Using an empty string as a password is insecure.
CWE-521
Weak Password Requirements
The product does not require that users should have strong passwords, which makes it easier for attackers to compromise user accounts.

References (5)

Source: psirt@us.ibm.com
VDB EntryVendor Advisory
Source: psirt@us.ibm.com
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
VDB EntryVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.