IBM WebSEAL Incorrect Default Permissions Vulnerability - CVE-2023-38370 - Vulnerability Database

IBM WebSEAL Incorrect Default Permissions Vulnerability - CVE-2023-38370

Medium

Reference: CVE-2023-38370

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2023-38370

Title: IBM WebSEAL Incorrect Default Permissions Vulnerability

Overview:

IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 under certain configurations could allow a user on the network to install malicious packages. IBM X-Force ID: 261197.