Lucene search
HistoryJul 19, 2023 - 2:15 a.m.
CVE-2023-26026
ibm
x-force
planning analytics cartridge
cloud pak for data
sensitive information
logs
attacker
vulnerability
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
6.1
Confidence
High
EPSS
0.001
Percentile
45.1%
Planning Analytics Cartridge for Cloud Pak for Data 4.0 exposes sensitive information in logs which could lead an attacker to exploit this vulnerability to conduct further attacks. IBM X-Force ID: 247896.
Affected configurations
Node
ibmcloud_pak_for_dataMatch4.0-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | cloud_pak_for_data | 4.0 | cpe:2.3:a:ibm:cloud_pak_for_data:4.0:-:*:*:*:*:*:* |
Related
cnvd
cnvd
IBM Planning Analytics Encryption Problem Vulnerability (CNVD-2023-68783)
2023-07-21 00:00:00
cvelist
cvelist
prion
prion
Code injection
2023-07-19 02:15:00
cve
cve
CVE-2023-26026
2023-07-19 02:15:09
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
6.1
Confidence
High
EPSS
0.001
Percentile
45.1%
Related for NVD:CVE-2023-26026