IBM Cloud Pak for Security information disclosure
CVE-2022-36777

4.3MEDIUM

Key Information:

Vendor

IBM
Status
Cloud Pak For Security
Qradar Suite Software
Vendor
CVE Published:
22 November 2023

What is CVE-2022-36777?

IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.11.0 and IBM QRadar Suite Software 1.10.12.0 through 1.10.16.0could allow an authenticated user to obtain sensitive version information that could aid in further attacks against the system. IBM X-Force ID: 233665.

Affected Version(s)

Cloud Pak for Security 1.10.0.0 <= 1.10.11.0

QRadar Suite Software 1.10.12.0 <= 1.10.16.0

References

https://www.ibm.com/support/pages/node/7080058
vendor-advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/233665
vdb-entry

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.