{"cve":{"cve_id":"CVE-2023-38369","is_kev":false,"kev_date_added":null,"kev_vendor_project":null,"kev_product":null,"kev_vulnerability_name":null,"kev_short_description":null,"kev_required_action":null,"kev_due_date":null,"kev_known_ransomware":null,"kev_notes":null,"kev_cwes":null,"epss_score":0.00532,"epss_percentile":0.40694,"epss_as_of":"2026-06-23","description":"IBM Security Access Manager Container 10.0.0.0 through 10.0.6.1 does not require that docker images should have strong passwords by default, which makes it easier for attackers to compromise user accounts.  IBM X-Force ID:  261196.","published_at":"2024-02-07T16:15:04.324000Z","last_modified_at":null,"cvss_v3_score":6.2,"cvss_v3_vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss_v3_severity":"MEDIUM","cvss_v4_score":null,"cvss_v4_vector":null,"cvss_v4_severity":null,"ssvc_decision":null,"ssvc_exploitation":"none","ssvc_automatable":false,"ssvc_technical_impact":"partial","cwes":["CWE-521"],"nvd_references":["https://www.ibm.com/support/pages/node/7106586","https://exchange.xforce.ibmcloud.com/vulnerabilities/261196"],"vuln_status":null,"trending_score":null,"is_trending":false,"has_trended":false,"trended_number_one":false,"trending_peak_score":null,"trending_peak_rank":null,"started_trending_at":null,"trended_number_one_at":null,"summary_generated":null,"summary_generated_at":null,"summary_model":null,"created_at":"2026-06-24T00:09:39.878444Z","updated_at":"2026-06-29T01:34:15.653008Z"},"effective_severity":"MEDIUM","badges":[],"impact_analysis":[],"cvss_v3_decoded":{"version":"3.1","metrics":[{"metric":"AV","name":"Attack Vector","value":"L","value_label":"Local"},{"metric":"AC","name":"Attack Complexity","value":"L","value_label":"Low"},{"metric":"PR","name":"Privileges Required","value":"N","value_label":"None"},{"metric":"UI","name":"User Interaction","value":"N","value_label":"None"},{"metric":"S","name":"Scope","value":"U","value_label":"Unchanged"},{"metric":"C","name":"Confidentiality","value":"H","value_label":"High"},{"metric":"I","name":"Integrity","value":"N","value_label":"None"},{"metric":"A","name":"Availability","value":"N","value_label":"None"}]},"cvss_v4_decoded":{"version":null,"metrics":[]},"affected":[{"vendor_slug":"ibm","vendor_name":"ibm","product_slug":"security-verify-access-appliance","product_name":"Security Verify Access Appliance","version_start":"10.0.0.0","version_start_inclusive":true,"version_end":"10.0.6.1","version_end_inclusive":true,"cpe23_uri":"cve5:ibm:security-verify-access-appliance:10.0.0.0:10.0.6.1"},{"vendor_slug":"ibm","vendor_name":"ibm","product_slug":"security-verify-access-docker","product_name":"security_verify_access_docker","version_start":"10.0.0.0","version_start_inclusive":true,"version_end":"10.0.6.1","version_end_inclusive":true,"cpe23_uri":"cve5:ibm:security-verify-access-docker:10.0.0.0:10.0.6.1"}],"exploit_refs":[],"news":[],"references":[{"url":"https://www.ibm.com/support/pages/node/7106586","source_type":"MISC","tags":[]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/261196","source_type":"MISC","tags":[]}],"timeline":[{"type":"published","at":"2024-02-07T16:15:04.324000Z","label":"CVE published","source":null},{"type":"cvss_changed","at":"2026-06-28T17:29:20.288769Z","label":"CVSS score revised","source":"cvelistv5"},{"type":"cvss_changed","at":"2026-06-28T17:29:20.288769Z","label":"CVSS score revised","source":"cvelistv5"},{"type":"cvss_changed","at":"2026-06-28T17:29:20.288769Z","label":"CVSS score revised","source":"cvelistv5"},{"type":"ssvc_changed","at":"2026-06-29T01:34:15.653008Z","label":"SSVC decision revised","source":"vulnrichment"},{"type":"ssvc_changed","at":"2026-06-29T01:34:15.653008Z","label":"SSVC decision revised","source":"vulnrichment"},{"type":"ssvc_changed","at":"2026-06-29T01:34:15.653008Z","label":"SSVC decision revised","source":"vulnrichment"}]}