CVE-2023-27877

Опубликовано: 19 июл. 2023

Источник: nvd

CVSS3: 5.3

CVSS3: 7.5

EPSS Низкий

Описание

IBM Planning Analytics Cartridge for Cloud Pak for Data 4.0 connects to a CouchDB server. An attacker can exploit an insecure password policy to the CouchDB server and collect sensitive information from the database. IBM X-Force ID: 247905.

Ссылки

https://exchange.xforce.ibmcloud.com/vulnerabilities/247905
VDB Entry
Vendor Advisory
https://www.ibm.com/support/pages/node/6999351
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/247905
VDB Entry
Vendor Advisory
https://www.ibm.com/support/pages/node/6999351
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ibm:cloud_pak_for_data:4.0:-:*:*:*:*:*:*

EPSS

Процентиль: 18%

0.00059

Низкий

5.3 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-200

CWE-287

Связанные уязвимости

GHSA-qw89-4pf3-xh2c

CVSS3: 5.3

github

больше 2 лет назад

EPSS

Процентиль: 18%

0.00059

Низкий

5.3 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-200

CWE-287