CVE-2022-43901

Опубликовано: 01 дек. 2022

Источник: nvd

CVSS3: 5.7

CVSS3: 5.5

EPSS Низкий

Описание

IBM WebSphere Automation for IBM Cloud Pak for Watson AIOps 1.4.3 could disclose sensitive information. An authenticated local attacker could exploit this vulnerability to possibly gain information to other IBM WebSphere Automation for IBM Cloud Pak for Watson AIOps components. IBM X-Force ID: 240829.

Ссылки

https://exchange.xforce.ibmcloud.com/vulnerabilities/240829
Broken Link
VDB Entry
Vendor Advisory
https://www.ibm.com/support/pages/node/6842605
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/240829
Broken Link
VDB Entry
Vendor Advisory
https://www.ibm.com/support/pages/node/6842605
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ibm:websphere_automation_for_ibm_cloud_pak_for_watson_aiops:*:*:*:*:*:*:*:*

Версия до 1.4.3 (исключая)

EPSS

Процентиль: 15%

0.00049

Низкий

5.7 Medium

CVSS3

5.5 Medium

CVSS3

Дефекты

CWE-200

CWE-668

Связанные уязвимости

GHSA-82g9-h5x7-73w7

CVSS3: 5.5

github

около 3 лет назад

EPSS

Процентиль: 15%

0.00049

Низкий

5.7 Medium

CVSS3

5.5 Medium

CVSS3

Дефекты

CWE-200

CWE-668