CVE-2023-26023mediumCWE-532

CVE-2023-26023: falha de média gravidade em IBM Sterling Connect:Express for UNIX

IBM Planning Analytics Cartridge for Cloud Pak for Data information disclosure

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Sterling Connect:Express for UNIX

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.5epss 0.7%
Planning Analytics Cartridge for Cloud Pak for Data 4.0 exposes sensitive information in logs which could lead an attacker to exploit this vulnerability to conduct further attacks. IBM X-Force ID: 247896.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Produtos afetados
IBM · Sterling Connect:Express for UNIX
CVEs relacionadas — IBM Sterling Connect:Express for UNIX

No mesmo produto, das mais perigosas para as menos.

CVE-2023-32331HIGHIBM Connect:Express for UNIX denial of serviceEPSS 0.7%CVE-2023-29259LOWIBM Sterling Connect:Express for UNIX information disclosureEPSS 0.5%CVE-2021-38933MEDIUMIBM Sterling Connect:Express for UNIX information disclosureEPSS 0.4%CVE-2023-29260MEDIUMIBM Sterling Connect:Express for UNIX server-side request forgeryEPSS 0.3%