CVEvulnerability
CVE-2023-23469
3.3 LOW
Official page ↗
- Status
- Modified
- Published
- 2023-02-01
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.0 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- CVSS 3.1 ([email protected])
- 3.3 LOW — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- Weaknesses
- CWE-525
Description
IBM ICP4A - Automation Decision Services 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 244504.
Affected configurations
• ibm cloud pak for business automation (>= 18.0.0 <= 20.0.3)
• ibm cloud pak for business automation 21.0.1
• ibm cloud pak for business automation 21.0.2
• ibm cloud pak for business automation 21.0.3
• ibm cloud pak for business automation 22.0.2
Related
Weakness · CWE (1)
- CWE-525 Use of Web Browser Cache Containing Sensitive Information weakness
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/244504 Broken Link
- https://www.ibm.com/support/pages/node/6857999 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/244504 Broken Link
- https://www.ibm.com/support/pages/node/6857999 Vendor Advisory