CVE-2023-30998: 
IBM Security Access Manager (ISAM) vulnerability analysis and mitigation

IBM Security Access Manager Docker versions 10.0.0.0 through 10.0.7.1 contains a security vulnerability that could allow a local user to obtain root access due to improper access controls (IBM Advisory, NVD). The vulnerability was disclosed on June 27, 2024, and is tracked as CVE-2023-30998 with IBM X-Force ID: 254649.

The vulnerability has been assigned a CVSS v3.1 Base Score of 7.8 (HIGH) with the following vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. The vulnerability is classified under CWE-250 (Execution with Unnecessary Privileges) (NVD).

If exploited, this vulnerability allows a local attacker to obtain root access to the system, potentially leading to complete system compromise with high impacts on confidentiality, integrity, and availability (IBM Advisory).

IBM strongly encourages customers to update their systems promptly. For Docker Container installations, users should obtain the latest version by running the command 'docker pull icr.io/isva/verify-access:[tag]' where [tag] is the latest published version. The fix is available in version 10.0.8.0 (IBM Advisory).