Lucene search

K
nvd[email protected]NVD:CVE-2023-26024
HistoryDec 01, 2023 - 7:15 p.m.

CVE-2023-26024

2023-12-0119:15:07
CWE-327
web.nvd.nist.gov
9
ibm
planning analytics
cloud pak for data
4.0
insecure network communication

CVSS3

6.5

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.001

Percentile

28.1%

IBM Planning Analytics on Cloud Pak for Data 4.0 could allow an attacker on a shared network to obtain sensitive information caused by insecure network communication. IBM X-Force ID: 247898.

Affected configurations

Nvd
Node
ibmplanning_analytics_on_cloud_pak_for_dataMatch4.0
VendorProductVersionCPE
ibmplanning_analytics_on_cloud_pak_for_data4.0cpe:2.3:a:ibm:planning_analytics_on_cloud_pak_for_data:4.0:*:*:*:*:*:*:*

CVSS3

6.5

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.001

Percentile

28.1%

Related for NVD:CVE-2023-26024