PT-2023-24513 · Ibm · Ibm Spss Modeler

Publicado 2023-06-22 · Atualizado 2023-06-28 · CVE-2023-33842

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Média

Vetor base

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM SPSS Modeler on Windows versions 17.0 through 18.5

Description The issue allows a local user to decrypt and obtain sensitive information because the end user has access to the server SSL key.

Recommendations For versions 17.0 through 18.5, restrict access to the server SSL key to prevent local users from decrypting and obtaining sensitive information.

Correção

Identificadores relacionados

CVE-2023-33842

Produtos afetados

Ibm Spss Modeler

Referências · 6

• https://t.me/cibsecurity/65410 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-33842 · Nota de Segurança
• https://https//www.ibm.com/support/pages/node/7004299 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/256117 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2023-33842 · Aviso do Fabricante
• https://t.me/cvenotify/52865 · Publicação no Telegram