CVE-2023-32329: 
IBM Security Verify Access (formerly ISAM) vulnerability analysis and mitigation

IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1) could allow a user to download files from an incorrect repository due to improper file validation (IBM Security Bulletin, NVD).

The vulnerability has a CVSS v3.1 Base Score of 5.5 MEDIUM (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) according to NVD assessment, while IBM Corporation rated it as 6.2 MEDIUM (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N). The vulnerability is classified as CWE-345 (Insufficient Verification of Data Authenticity) (NVD).

The vulnerability allows users to download files from incorrect repositories, potentially leading to unauthorized access to files and data that should be restricted. The impact primarily affects the integrity of the system, with no direct effect on confidentiality or availability (IBM Security Bulletin).

IBM has released patches to address this vulnerability. Users are advised to update to the latest version of the container by running the command 'docker pull icr.io/isva/verify-access:[tag]' where [tag] is the latest published version. For ISAM/ISVA appliances, users should obtain and install fix 10.0.7-ISS-ISVA-FP0000 (IBM Security Bulletin).