CVE-2023-27545

MEDIUM

IBM Cloud Pak for Data 4.6.0 - Sensitive Information Exposure via Browser Cache

Title source: llm
STIX 2.1

Description

IBM Watson CloudPak for Data Data Stores information disclosure 4.6.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 248947.

References (2)

Core 2
Core References
Vendor Advisory vendor-advisory
https://www.ibm.com/support/pages/node/6965446

Scores

CVSS v3 4.0
EPSS 0.0003
EPSS Percentile 10.7%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-525
Status published
Products (1)
ibm/cloud_pak_for_data 4.6.0
Published Feb 29, 2024
Tracked Since Feb 18, 2026