Lucene search

K
nvd[email protected]NVD:CVE-2023-50306
HistoryFeb 20, 2024 - 2:15 p.m.

CVE-2023-50306

2024-02-2014:15:08
CWE-204
web.nvd.nist.gov
1
ibm common licensing
local user enumeration
vulnerability
observable response discrepancy
x-force id 273337

CVSS3

4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

4.3

Confidence

High

EPSS

0

Percentile

9.0%

IBM Common Licensing 9.0 could allow a local user to enumerate usernames due to an observable response discrepancy. IBM X-Force ID: 273337.

CVSS3

4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

4.3

Confidence

High

EPSS

0

Percentile

9.0%

Related for NVD:CVE-2023-50306