CVE-2023-47728CWE-209

IBM QRadar Suite Software information disclosure

Medium · published August 16, 2024

CVSS v3.1
6.5
EPSS
0%
Percentile
38.8
In the wild
Unconfirmed
What it is

IBM QRadar Suite Software 1.10.12.0 through 1.10.22.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the request. This information could be used in further attacks against the system. IBM X-Force ID: 272201.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00458 · 38.8th percentile
Weakness
CWE-209 · Generation of Error Message Containing Sensitive Information
Published
2024-08-16T19:12Z
EPSS history
Timeline
  • 16 AUG 19:12Z
    IBM QRadar Suite Software information disclosure
    cvelistv5