{"id":"CVE-2023-31001","aliases":["EUVD-2023-35339","GHSA-h8w2-c9wm-f46f"],"status":"published","title":"IBM Security Access Manager Container information disclosure","description":"IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.6.1) temporarily stores sensitive information in files that could be accessed by a local user.  IBM X-Force ID:  254653.","severity":{"version":"3.1","score":5.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.0021,"percentile":0.11261,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-257"],"published":"2024-01-11T02:44:33Z","modified":"2026-06-17T05:56:03Z","products":[{"vendor":"ibm","product":"security verify access appliance"},{"vendor":"ibm","product":"security verify access docker"},{"vendor":"ibm","product":"security_verify_access"},{"vendor":"ibm","product":"security_verify_access_docker"}],"references":[{"url":"https://www.ibm.com/support/pages/node/7106586","tags":["vendor-advisory","x_transferred","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/254653","tags":["vdb-entry","x_transferred","VDB Entry","Vendor Advisory"]},{"url":"http://seclists.org/fulldisclosure/2024/Nov/0"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-31001"},{"url":"https://github.com/advisories/GHSA-h8w2-c9wm-f46f"}],"sources":{"cve":[{"id":"CVE-2023-31001","title":"IBM Security Access Manager Container information disclosure","description":"IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.6.1) temporarily stores sensitive information in files that could be accessed by a local user.  IBM X-Force ID:  254653.","status":"published","published":"2024-01-11T02:44:33.092Z","modified":"2025-11-03T21:48:13.695Z","cvss":[{"version":"3.1","score":5.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-257"],"updated_at":"2026-11-02T14:35:27.430605Z"}],"euvd":[{"id":"EUVD-2023-35339","description":"IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.6.1) temporarily stores sensitive information in files that could be accessed by a local user.  IBM X-Force ID:  254653.","status":"published","published":"2024-01-11T02:44:33Z","modified":"2025-11-03T21:48:13Z","cvss":[{"version":"3.1","score":5.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T19:49:31.25882Z"}],"ghsa":[{"id":"GHSA-h8w2-c9wm-f46f","title":"IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0...","description":"IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.6.1) temporarily stores sensitive information in files that could be accessed by a local user.  IBM X-Force ID:  254653.","status":"published","published":"2024-01-11T03:30:29Z","modified":"2025-11-04T00:30:43Z","cvss":[{"version":"3.1","score":5.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-257"],"updated_at":"2026-11-02T15:04:25.970519Z"}],"nvd":[{"id":"CVE-2023-31001","description":"IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.6.1) temporarily stores sensitive information in files that could be accessed by a local user.  IBM X-Force ID:  254653.","status":"published","published":"2024-01-11T03:15:09.413Z","modified":"2026-06-17T05:56:03.133Z","cvss":[{"version":"3.1","score":5.1,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-257"],"updated_at":"2026-11-02T14:09:00.788714Z"}]}}