PT-2023-27600 · Ibm · Ibm Cloud Pak For Business Automation

Publicado 2023-12-18 · Atualizado 2023-12-22 · CVE-2023-40691

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Média

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM Cloud Pak for Business Automation versions 18.0.0 through 22.0.2

Description The issue may reveal sensitive information contained in application configuration to developer and administrator users.

Recommendations For IBM Cloud Pak for Business Automation versions 18.0.0 through 22.0.2, update to a version that contains a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2023-40691

Produtos afetados

Ibm Cloud Pak For Business Automation

Referências · 9

• https://twitter.com/CVEnew/status/1736848406600089688 · Publicação no Twitter
• https://exchange.xforce.ibmcloud.com/vulnerabilities/264805 · Aviso do Fabricante
• https://twitter.com/RedPacketSec/status/1737051454639112272 · Publicação no Twitter
• https://t.me/cvenotify/64125 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-40691 · Nota de Segurança
• https://t.me/cvenotify/64029 · Publicação no Telegram
• https://t.me/cvenotify/64952 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-40691 · Aviso do Fabricante
• https://ibm.com/support/pages/node/7096365 · Aviso do Fabricante