CVE-2023-27877 | THREATINT

Description

IBM Planning Analytics Cartridge for Cloud Pak for Data 4.0 connects to a CouchDB server. An attacker can exploit an insecure password policy to the CouchDB server and collect sensitive information from the database. IBM X-Force ID: 247905.

PUBLISHED Reserved 2023-03-06 | Published 2023-07-19 | Updated 2024-10-28 | Assigner ibm

MEDIUM: 5.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Problem types

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

Product status

Default status

unaffected

4.0

affected

References

www.ibm.com/support/pages/node/6999351 vendor-advisory

exchange.xforce.ibmcloud.com/vulnerabilities/247905 vdb-entry

www.ibm.com/support/pages/node/6999351 vendor-advisory

exchange.xforce.ibmcloud.com/vulnerabilities/247905 vdb-entry

cve.org (CVE-2023-27877)

nvd.nist.gov (CVE-2023-27877)

Download JSON