PT-2023-18977 · Ibm · Ibm Icp4A - Automation Decision Services

Publicado 2023-02-01 · Atualizado 2025-03-26 · CVE-2023-23469

Positive Technologies (AI Summary)

CVSS v3.1

4.0

Média

Vetor base

AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM ICP4A - Automation Decision Services versions 18.0.0 through 22.0.2

Description The issue allows web pages to be stored locally, which can then be read by another user on the system.

Recommendations For versions 18.0.0 through 22.0.2, consider implementing access controls to restrict which users can read locally stored web pages, or apply configuration changes to prevent web pages from being stored locally. At the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Enumeração de Fraquezas

CWE-525

Identificadores relacionados

CVE-2023-23469

Produtos afetados

Ibm Icp4A - Automation Decision Services

Referências · 7

• https://ibm.com/support/pages/node/6857999 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/244504 · Nota
• https://t.me/cvenotify/44001 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-23469 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-23469 · Aviso do Fabricante
• https://t.me/cibsecurity/57342 · Publicação no Telegram
• https://t.me/cvenotify/116331 · Publicação no Telegram