IBM SOAR QRadar Plugin App improper access controls
CVE-2023-38263

6.5MEDIUM

Key Information:

Vendor

IBM
Status
Soar Qradar Plugin App
Vendor
CVE Published:
2 February 2024

What is CVE-2023-38263?

The IBM SOAR QRadar Plugin App versions 1.0 through 5.0.3 contain a vulnerability that permits authenticated users to execute unauthorized actions due to inadequate access controls. This weakness could potentially be exploited to manipulate system behavior, posing risks to data integrity and security. Users of the affected product are urged to assess their configurations and apply the necessary updates to mitigate any potential threats. For detailed guidance, refer to IBM's advisory.

Affected Version(s)

SOAR QRadar Plugin App 1.0 <= 5.0.3

References

https://www.ibm.com/support/pages/node/7111679
vendor-advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/260577
vdb-entry

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.