4.9

CVE-2023-40691

EPSS 0.05%
Published 18.12.2023 21:15:08
Last modified 21.11.2024 08:19:58
Source psirt@us.ibm.com
Teams watchlist Login
Open Login

IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 may reveal sensitive information contained in application configuration to developer and administrator users.  IBM X-Force ID:  264805.

Affected products Warnungen 0 Metrics 3 CWE 1 References 5

Data is provided by the National Vulnerability Database (NVD)

Ibm ≫ Cloud Pak For Business Automation Version18.0.0

Ibm ≫ Cloud Pak For Business Automation Version18.0.2

Ibm ≫ Cloud Pak For Business Automation Version19.0.1

Ibm ≫ Cloud Pak For Business Automation Version19.0.3

Ibm ≫ Cloud Pak For Business Automation Version20.0.1

Ibm ≫ Cloud Pak For Business Automation Version20.0.3

Ibm ≫ Cloud Pak For Business Automation Version21.0.1 Update-

Ibm ≫ Cloud Pak For Business Automation Version21.0.1 Updateinterim_fix_001

Ibm ≫ Cloud Pak For Business Automation Version21.0.1 Updateinterim_fix_002

Ibm ≫ Cloud Pak For Business Automation Version21.0.1 Updateinterim_fix_003

Ibm ≫ Cloud Pak For Business Automation Version21.0.1 Updateinterim_fix_004

Ibm ≫ Cloud Pak For Business Automation Version21.0.1 Updateinterim_fix_005

Ibm ≫ Cloud Pak For Business Automation Version21.0.1 Updateinterim_fix_006

Ibm ≫ Cloud Pak For Business Automation Version21.0.1 Updateinterim_fix_007

Ibm ≫ Cloud Pak For Business Automation Version21.0.1 Updateinterim_fix_008

Ibm ≫ Cloud Pak For Business Automation Version21.0.3 Update-

Ibm ≫ Cloud Pak For Business Automation Version21.0.3 Updateinterim_fix_001

Ibm ≫ Cloud Pak For Business Automation Version21.0.3 Updateinterim_fix_002

Ibm ≫ Cloud Pak For Business Automation Version21.0.3 Updateinterim_fix_003

Ibm ≫ Cloud Pak For Business Automation Version21.0.3 Updateinterim_fix_004

Ibm ≫ Cloud Pak For Business Automation Version21.0.3 Updateinterim_fix_005

Ibm ≫ Cloud Pak For Business Automation Version21.0.3 Updateinterim_fix_006

Ibm ≫ Cloud Pak For Business Automation Version21.0.3 Updateinterim_fix_007

Ibm ≫ Cloud Pak For Business Automation Version21.0.3 Updateinterim_fix_008

Ibm ≫ Cloud Pak For Business Automation Version21.0.3 Updateinterim_fix_009

Ibm ≫ Cloud Pak For Business Automation Version21.0.3 Updateinterim_fix_010

Ibm ≫ Cloud Pak For Business Automation Version21.0.3 Updateinterim_fix_011

Ibm ≫ Cloud Pak For Business Automation Version21.0.3 Updateinterim_fix_012

Ibm ≫ Cloud Pak For Business Automation Version21.0.3 Updateinterim_fix_013

Ibm ≫ Cloud Pak For Business Automation Version21.0.3 Updateinterim_fix_014

Ibm ≫ Cloud Pak For Business Automation Version21.0.3 Updateinterim_fix_015

Ibm ≫ Cloud Pak For Business Automation Version21.0.3 Updateinterim_fix_016

Ibm ≫ Cloud Pak For Business Automation Version21.0.3 Updateinterim_fix_017

Ibm ≫ Cloud Pak For Business Automation Version21.0.3 Updateinterim_fix_018

Ibm ≫ Cloud Pak For Business Automation Version21.0.3 Updateinterim_fix_019

Ibm ≫ Cloud Pak For Business Automation Version21.0.3 Updateinterim_fix_020

Ibm ≫ Cloud Pak For Business Automation Version21.0.3 Updateinterim_fix_021

Ibm ≫ Cloud Pak For Business Automation Version21.0.3 Updateinterim_fix_022

Ibm ≫ Cloud Pak For Business Automation Version21.0.3 Updateinterim_fix_023

Ibm ≫ Cloud Pak For Business Automation Version21.0.3 Updateinterim_fix_024

Ibm ≫ Cloud Pak For Business Automation Version21.0.3 Updateinterim_fix_025

Ibm ≫ Cloud Pak For Business Automation Version21.0.3 Updateinterim_fix_026

Ibm ≫ Cloud Pak For Business Automation Version22.0.2 Update-

Ibm ≫ Cloud Pak For Business Automation Version22.0.2 Updateinterim_fix_001

Ibm ≫ Cloud Pak For Business Automation Version22.0.2 Updateinterim_fix_002

Ibm ≫ Cloud Pak For Business Automation Version22.0.2 Updateinterim_fix_003

Ibm ≫ Cloud Pak For Business Automation Version22.0.2 Updateinterim_fix_004

Ibm ≫ Cloud Pak For Business Automation Version22.0.2 Updateinterim_fix_005

Ibm ≫ Cloud Pak For Business Automation Version22.0.2 Updateinterim_fix_006

Ibm ≫ Cloud Pak For Business Automation Version23.0.1 Update-

Ibm ≫ Cloud Pak For Business Automation Version23.0.1 Updateinterim_fix_001

Ibm ≫ Cloud Pak For Business Automation Version23.0.1 Updateinterim_fix_002

Ibm ≫ Cloud Pak For Business Automation Version23.0.1 Updateinterim_fix_003

Ibm ≫ Cloud Pak For Business Automation Version23.0.1 Updateinterim_fix_004

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.05%	0.149

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	4.9	1.2	3.6	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
psirt@us.ibm.com	4.9	1.2	3.6	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

https://exchange.xforce.ibmcloud.com/vulnerabilities/264805

Vendor Advisory

VDB Entry

https://www.ibm.com/support/pages/node/7096365

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2023-40691

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2023-40691

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2023-40691

EUVD