CVE-2023-38267

IBM Security Access Manager Appliance (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.6.1) could allow a local user to possibly elevate their privileges due to sensitive configuration information being exposed. IBM X-Force ID: 260584.

• CWE-311

• https://exchange.xforce.ibmcloud.com/vulnerabilities/260584VDB Entry, Vendor Advisory
• https://www.ibm.com/support/pages/node/7106586Patch, Vendor Advisory
• http://seclists.org/fulldisclosure/2024/Nov/0
• https://exchange.xforce.ibmcloud.com/vulnerabilities/260584VDB Entry, Vendor Advisory
• https://www.ibm.com/support/pages/node/7106586Patch, Vendor Advisory

Published

Jan 11, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-3826A vulnerability has been found in IBOS OA 4.5.5 and classifi…9.8
• CVE-2023-38261The issue was addressed with improved memory handling. This …7.8
• CVE-2023-38262Rejected reason: This is unused.
• CVE-2023-38263IBM SOAR QRadar Plugin App 1.0 through 5.0.3 could allow an …8.8
• CVE-2023-38264The IBM SDK, Java Technology Edition's Object Request Broker…7.5
• CVE-2023-38265IBM Cloud Pak System 2.3.3.6, 2.3.3.7, 2.3.4.0, 2.3.4.1, and…5.3
• CVE-2023-38268IBM InfoSphere Information Server 11.7 is vulnerable to cros…8.8
• CVE-2023-3827A vulnerability was found in Bug Finder Listplace Directory …6.1
• CVE-2023-38271IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.…6.5
• CVE-2023-38272IBM Cloud Pak System 2.3.3.0, 2.3.3.3, 2.3.3.3 iFix1, 2.3.3.…7.5
• CVE-2023-38273IBM Cloud Pak System 2.3.1.1, 2.3.2.0, and 2.3.3.7 uses an i…7.5
• CVE-2023-38275IBM Cognos Dashboards on Cloud Pak for Data 4.7.0 exposes se…7.5