CVE-2023-38276CWE-319

IBM Cognos Dashboards information disclosure

Medium · published October 22, 2023

CVSS v3.1
5.9
EPSS
0%
Percentile
32.8
In the wild
Unconfirmed
What it is

IBM Cognos Dashboards on Cloud Pak for Data 4.7.0 exposes sensitive information in environment variables which could aid in further attacks against the system. IBM X-Force ID: 260736.

The record
Technical detail
CVSS v3.1
5.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00397 · 32.8th percentile
Weakness
CWE-319 · Cleartext Transmission of Sensitive Information
Published
2023-10-22T01:02Z
EPSS history
Timeline
  • 22 OCT 01:02Z
    IBM Cognos Dashboards information disclosure
    cvelistv5