CVE-2022-38383

MEDIUM

4.0

Description

IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.11.0 and IBM QRadar Software Suite 1.10.12.0 through 1.10.21.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 233673.

Details CVE

Score CVSS v3.14.0

SeveriteMEDIUM

Vecteur CVSSCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Vecteur d'attaqueLOCAL

ComplexiteLOW

Privileges requisNONE

Interaction utilisateurNONE

Publie6/28/2024

Derniere modification11/21/2024

Sourcenvd

Observations honeypot0

Produits affectes

ibm:cloud_pak_for_securityibm:qradar_suite

Faiblesses (CWE)

CWE-525

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/233673(psirt@us.ibm.com)

https://www.ibm.com/support/pages/node/7158986(psirt@us.ibm.com)

https://exchange.xforce.ibmcloud.com/vulnerabilities/233673(af854a3a-2127-422b-91ae-364da2661108)

https://www.ibm.com/support/pages/node/7158986(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.