CVE-2023-50940CWE-942

IBM PowerSC cross-resource origin sharing

Medium · published February 2, 2024

CVSS v3.1
5.3
EPSS
0%
Percentile
38.6
In the wild
Unconfirmed
What it is

IBM PowerSC 1.3, 2.0, and 2.1 uses Cross-Origin Resource Sharing (CORS) which could allow an attacker to carry out privileged actions and retrieve sensitive information as the domain name is not being limited to only trusted domains. IBM X-Force ID: 275130.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00456 · 38.6th percentile
Weakness
CWE-942 · Permissive Cross-domain Security Policy with Untrusted Domains
Published
2024-02-02T01:05Z
EPSS history
Timeline
  • 02 FEB 01:05Z
    IBM PowerSC cross-resource origin sharing
    cvelistv5