← Back to CVEs
CVE-2023-23469
MEDIUM4.0
Description
IBM ICP4A - Automation Decision Services 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 244504.
CVE Details
CVSS v3.1 Score4.0
SeverityMEDIUM
CVSS VectorCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack VectorLOCAL
ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
Published2/1/2023
Last Modified3/26/2025
Sourcenvd
Honeypot Sightings0
Affected Products
ibm:cloud_pak_for_business_automation
Weaknesses (CWE)
CWE-525
References
https://exchange.xforce.ibmcloud.com/vulnerabilities/244504(psirt@us.ibm.com)
https://www.ibm.com/support/pages/node/6857999(psirt@us.ibm.com)
https://exchange.xforce.ibmcloud.com/vulnerabilities/244504(af854a3a-2127-422b-91ae-364da2661108)
https://www.ibm.com/support/pages/node/6857999(af854a3a-2127-422b-91ae-364da2661108)
IOC Correlations
No correlations recorded
This product uses data from the NVD API but is not endorsed or certified by the NVD.