CVE-2023-50959

MEDIUM

IBM Cloud Pak for Business Automation <23.0.2 - Info Disclosure

Title source: llm
STIX 2.1

Description

IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2,19.0.1, 19.0.2, 19.0.3,20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1,2 2.0.2, 23.0.1, and 23.0.2 may allow end users to query more documents than expected from a connected Enterprise Content Management system when configured to use a system account. IBM X-Force ID: 275938.

References (2)

Core 2
Core References
Vendor Advisory vendor-advisory
https://www.ibm.com/support/pages/node/7145492

Scores

CVSS v3 5.3
EPSS 0.0055
EPSS Percentile 41.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-497
Status published
Products (16)
ibm/cloud_pak_for_business_automation 18.0.0
ibm/cloud_pak_for_business_automation 18.0.1
ibm/cloud_pak_for_business_automation 18.0.2
ibm/cloud_pak_for_business_automation 19.0.1
ibm/cloud_pak_for_business_automation 19.0.2
ibm/cloud_pak_for_business_automation 19.0.3
ibm/cloud_pak_for_business_automation 20.0.1
ibm/cloud_pak_for_business_automation 20.0.2
ibm/cloud_pak_for_business_automation 20.0.3
ibm/cloud_pak_for_business_automation 21.0.1
... and 6 more
Published Mar 31, 2024
Tracked Since Feb 18, 2026