Products
IBM Cloud Pak for Security
- 1.10.0.0
- 1.10.11.0
IBM QRadar Suite Software
- 1.10.12.0
- 1.10.22.0
Source
psirt@us.ibm.com
Tags
CVE-2023-47728 details
Published : Aug. 16, 2024, 8:15 p.m.
Last Modified : Aug. 16, 2024, 8:15 p.m.
Last Modified : Aug. 16, 2024, 8:15 p.m.
Description
IBM QRadar Suite Software 1.10.12.0 through 1.10.22.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the request. This information could be used in further attacks against the system. IBM X-Force ID: 272201.
CVSS Score
| 1 | 2 | 3 | 4.9 | 5 | 6 | 7 | 8 | 9 | 10 |
|---|
Weakness
| Weakness | Name | Description |
|---|---|---|
| CWE-209 | Generation of Error Message Containing Sensitive Information | The product generates an error message that includes sensitive information about its environment, users, or associated data. |
CVSS Data
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
Base Score
4.9
Exploitability Score
1.2
Impact Score
3.6
Base Severity
MEDIUM
Vector String : CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
References
| URL | Source |
|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilities/272201 | psirt@us.ibm.com |
| https://www.ibm.com/support/pages/node/7161427 | psirt@us.ibm.com |
This website uses the NVD API, but is not approved or certified by it.