CVE-2023-47722

MEDIUM

IBM API Connect V10.0.5.3 and V10.0.6.0 - Insufficiently Protected Credentials

Title source: llm

IBM API Connect V10.0.5.3 and V10.0.6.0 stores user credentials in browser cache which can be read by a local user. IBM X-Force ID: 271912.

Core 2

Core References

Vendor Advisory vendor-advisory

VDB Entry, Vendor Advisory vdb-entry

CVSS v3 6.2

EPSS 0.0002

EPSS Percentile 6.0%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE

CWE-522

Status published

Products (2)

ibm/api_connect 10.0.5.3

ibm/api_connect 10.0.6.0

Published Dec 09, 2023

Tracked Since Feb 18, 2026