Overview
- Description
- IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.11.0 and IBM QRadar Software Suite 1.10.12.0 through 1.10.21.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 233673.
- Source
- psirt@us.ibm.com
- NVD status
- Analyzed
Risk scores
CVSS 3.1
- Type
- Primary
- Base score
- 3.3
- Impact score
- 1.4
- Exploitability score
- 1.8
- Vector string
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- Severity
- LOW
Weaknesses
- nvd@nist.gov
- NVD-CWE-noinfo
- psirt@us.ibm.com
- CWE-525
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ibm:cloud_pak_for_security:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8FA89838-3E05-4778-9323-DE51CC10FD18",
"versionEndIncluding": "1.10.11.0",
"versionStartIncluding": "1.10.0.0"
},
{
"criteria": "cpe:2.3:a:ibm:qradar_suite:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "42C9A369-ABBD-47AB-99F6-039A4B7FA4EE",
"versionEndIncluding": "1.10.21.0",
"versionStartIncluding": "1.10.12.0"
}
],
"operator": "OR"
}
]
}
]