CVE-2023-27877CWE-200

IBM Planning Analytics Cartridge for Cloud Pak for Data information disclosure

Medium · published July 19, 2023

CVSS v3.1
5.3
EPSS
1%
Percentile
44.7
In the wild
Unconfirmed
What it is

IBM Planning Analytics Cartridge for Cloud Pak for Data 4.0 connects to a CouchDB server. An attacker can exploit an insecure password policy to the CouchDB server and collect sensitive information from the database. IBM X-Force ID: 247905.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00541 · 44.7th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2023-07-19T01:31Z
EPSS history
Timeline
  • 19 JUL 01:31Z
    IBM Planning Analytics Cartridge for Cloud Pak for Data information disclosure
    cvelistv5