CVE-2023-47722

MEDIUM

IBM API Connect - Insufficiently Protected Credentials

Title source: rule

Description

IBM API Connect V10.0.5.3 and V10.0.6.0 stores user credentials in browser cache which can be read by a local user. IBM X-Force ID: 271912.

References (2)

Scores

CVSS v3 6.2
EPSS 0.0002
EPSS Percentile 5.3%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Classification

CWE
CWE-522
Status published

Affected Products (2)

ibm/api_connect
ibm/api_connect

Timeline

Published Dec 09, 2023
Tracked Since Feb 18, 2026