PT-2023-24513
CVE-2023-33842
·
Published
2023-06-22
·
Updated
2023-06-28
Description by
CVSS 3.1
6.2
MediumMetricsAV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
IBM SPSS Modeler on Windows versions 17.0 through 18.5
Description
The issue allows a local user to decrypt and obtain sensitive information because the end user has access to the server SSL key.
Recommendations
For versions 17.0 through 18.5, restrict access to the server SSL key to prevent local users from decrypting and obtaining sensitive information.
Found an issue in the description? Have something to add? Feel free to write us 👾