CVE-2023-38275CWE-319

IBM Cognos Dashboards information disclosure

Medium · published October 22, 2023

CVSS v3.1
5.9
EPSS
0%
Percentile
32.8
In the wild
Unconfirmed
What it is

IBM Cognos Dashboards on Cloud Pak for Data 4.7.0 exposes sensitive information in container images which could lead to further attacks against the system. IBM X-Force ID: 260730.

The record
Technical detail
CVSS v3.1
5.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00397 · 32.8th percentile
Weakness
CWE-319 · Cleartext Transmission of Sensitive Information
Published
2023-10-22T00:49Z
EPSS history
Timeline
  • 22 OCT 00:49Z
    IBM Cognos Dashboards information disclosure
    cvelistv5