PT-2023-21390
CVE-2023-27877
·
تاريخ النشر
2023-07-19
·
تاريخ التحديث
2023-07-28
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
IBM Planning Analytics Cartridge for Cloud Pak for Data version 4.0
Description
The issue concerns an insecure password policy in the CouchDB server connected to IBM Planning Analytics Cartridge for Cloud Pak for Data. This allows an attacker to exploit the policy and collect sensitive information from the database.
Recommendations
For IBM Planning Analytics Cartridge for Cloud Pak for Data version 4.0, consider implementing a secure password policy for the CouchDB server to prevent exploitation. As a temporary workaround, restrict access to the CouchDB server to minimize the risk of sensitive information collection.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾