PT-2023-23102 · Ibm · Ibm Cloud Pak For Security
CVE-2023-30993
·
Publicado
2023-06-27
·
Atualizado
2023-07-05
CVSS v3.1
7.5
Alta
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
IBM Cloud Pak for Security (CP4S) versions 1.9.0.0 through 1.9.2.0
Description
The issue allows an attacker with a valid API key for one tenant to access data from another tenant's account.
Recommendations
For versions 1.9.0.0 through 1.9.2.0, update to a version that contains a fix for this issue to prevent unauthorized access to tenant data.
Correção
Information Disclosure
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Ibm Cloud Pak For Security