CVE-2022-22465: 
IBM Security Verify Access (formerly ISAM) vulnerability analysis and mitigation

IBM Security Access Manager Appliance versions 10.0.0.0, 10.0.1.0, 10.0.2.0, and 10.0.3.0 contain a local privilege escalation vulnerability due to improper access permissions. The vulnerability was assigned CVE-2022-22465 and was disclosed on July 6, 2022 (IBM Security Bulletin).

The vulnerability has a CVSS v3.1 Base Score of 7.8 (High) with the following vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. The attack requires local access, low complexity, low privileges, and no user interaction. The impact affects confidentiality, integrity, and availability, all rated as high (AttackerKB).

If exploited, this vulnerability allows a local user to obtain elevated privileges on the affected system. The vulnerability has high potential impact on system confidentiality, integrity, and availability (IBM Security Bulletin).

IBM has released version 10.0.4.0 (10.0.4-ISS-ISVA-FP0000) to address this vulnerability. Users are advised to upgrade to this version as no workarounds or alternative mitigations are available (IBM Security Bulletin).