PT-2024-4808 · Ibm · Ibm Security Guardium

Published 2024-05-16 · Updated 2025-06-13 · CVE-2023-47717

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions: IBM Security Guardium version 12.0

Description: The issue is related to an uncontrolled consumption of resources, which could allow a privileged user to perform unauthorized actions, potentially leading to a denial of service. This could put system availability at risk.

Recommendations: For IBM Security Guardium version 12.0, upgrade the affected component immediately to mitigate potential disruptions. As a temporary workaround, consider restricting the actions of privileged users to minimize the risk of exploitation.

Fix

DoS

Resource Exhaustion

Allocation of Resources Without Limits

Weakness Enumeration

CWE-400

CWE-770

Related Identifiers

BDU:2024-05332

CVE-2023-47717

Affected Products

Ibm Security Guardium

References · 13

• https://exchange.xforce.ibmcloud.com/vulnerabilities/271690 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-47717 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-05332 · Security Note
• https://ibm.com/support/pages/node/7152469 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-47717 · Security Note
• https://twitter.com/CVEnew/status/1791164527742156985 · Twitter Post
• https://twitter.com/linuxpatch/status/1791183205598449677 · Twitter Post
• https://twitter.com/oktsec/status/1810783366729408778 · Twitter Post
• https://t.me/cvenotify/125684 · Telegram Post
• https://t.me/cvenotify/103424 · Telegram Post
• https://t.me/cvenotify/80074 · Telegram Post
• https://cybersecurity-help.cz/vdb/SB2024051618 · Note
• https://twitter.com/VulmonFeeds/status/1791204787431625045 · Twitter Post