← back
CVE-2023-38372mediumCWE-287

IBM Watson IoT Platform information disclosure

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.9epss 0.8%
exploitation probability
0.8%top 45% of all CVEs
observed exploitation
nono source reports it
An unauthorized attacker who has obtained an IBM Watson IoT Platform 1.0 security authentication token can use it to impersonate an authorized platform user. IBM X-Force ID: 261201.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N