CVE-2023-30993

Опубликовано: 27 июн. 2023

Источник: nvd

CVSS3: 6.8

CVSS3: 7.5

EPSS Низкий

Описание

IBM Cloud Pak for Security (CP4S) 1.9.0.0 through 1.9.2.0 could allow an attacker with a valid API key for one tenant to access data from another tenant's account. IBM X-Force ID: 254136.

Ссылки

https://exchange.xforce.ibmcloud.com/vulnerabilities/254136
VDB Entry
Vendor Advisory
https://www.ibm.com/support/pages/node/6995221
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/254136
VDB Entry
Vendor Advisory
https://www.ibm.com/support/pages/node/6995221
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ibm:cloud_pak_for_security:*:*:*:*:*:*:*:*

Версия от 1.9.0.0 (включая) до 1.9.2.0 (включая)

EPSS

Процентиль: 19%

0.00062

Низкий

6.8 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-200

Связанные уязвимости

GHSA-mr5g-mvhg-7rhw

CVSS3: 6.8

github

больше 2 лет назад

IBM Cloud Pak for Security (CP4S) 1.9.0.0 through 1.9.2.0 could allow an attacker with a valid API key for one tenant to access data from another tenant's account. IBM X-Force ID: 254136.

EPSS

Процентиль: 19%

0.00062

Низкий

6.8 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-200