IBM SOAR QRadar Plugin App improper access controls
CVE-2023-38263

6.5MEDIUM

Key Information:

Vendor

IBM
Status
Soar Qradar Plugin App
Vendor
CVE Published:
2 February 2024

What is CVE-2023-38263?

The IBM SOAR QRadar Plugin App versions 1.0 through 5.0.3 contain a vulnerability that permits authenticated users to execute unauthorized actions due to inadequate access controls. This weakness could potentially be exploited to manipulate system behavior, posing risks to data integrity and security. Users of the affected product are urged to assess their configurations and apply the necessary updates to mitigate any potential threats. For detailed guidance, refer to IBM's advisory.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

SOAR QRadar Plugin App 1.0 <= 5.0.3

References

https://www.ibm.com/support/pages/node/7111679
vendor-advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/260577
vdb-entry

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.