PT-2022-27043 · Ibm · Ibm Websphere Automation For Ibm Cloud Pak For Watson Aiops

Published 2022-12-01 · Updated 2022-12-06 · CVE-2022-43901

Positive Technologies (AI Summary)

CVSS v3.1

5.7

Medium

Base vector

AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM WebSphere Automation for IBM Cloud Pak for Watson AIOps version 1.4.3

Description The issue could disclose sensitive information. An authenticated local attacker could exploit this to possibly gain information to other IBM WebSphere Automation for IBM Cloud Pak for Watson AIOps components.

Recommendations For IBM WebSphere Automation for IBM Cloud Pak for Watson AIOps version 1.4.3, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Information Disclosure

Exposure of Resource to Wrong Sphere

Weakness Enumeration

CWE-200

CWE-668

Related Identifiers

CVE-2022-43901

Affected Products

Ibm Websphere Automation For Ibm Cloud Pak For Watson Aiops

References · 6

• https://osv.dev/vulnerability/CVE-2022-43901 · Vendor Advisory
• https://ibm.com/support/pages/node/6842605 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/240829 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-43901 · Security Note
• https://t.me/cvenotify/39298 · Telegram Post
• https://t.me/cibsecurity/53782 · Telegram Post