PT-2023-24513 · Ibm · Ibm Spss Modeler

Published 2023-06-22 · Updated 2023-06-28 · CVE-2023-33842

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM SPSS Modeler on Windows versions 17.0 through 18.5

Description The issue allows a local user to decrypt and obtain sensitive information because the end user has access to the server SSL key.

Recommendations For versions 17.0 through 18.5, restrict access to the server SSL key to prevent local users from decrypting and obtaining sensitive information.

Fix

Related Identifiers

CVE-2023-33842

Affected Products

Ibm Spss Modeler

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2023-33842 · Security Note
• https://https//www.ibm.com/support/pages/node/7004299 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/256117 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-33842 · Vendor Advisory
• https://t.me/cibsecurity/65410 · Telegram Post
• https://t.me/cvenotify/52865 · Telegram Post