IBM OpenPages with Watson privilege escalation

CVE-2023-40683

Summary

IBM OpenPages with Watson versions 8.3 and 9.0 are susceptible to an authorization bypass vulnerability stemming from inadequate authorization checks. This security flaw allows a remote attacker, once authenticated as an OpenPages user, to exploit non-public APIs. Consequently, the attacker can bypass stipulated security restrictions, leading to the potential for unauthorized administrative access to the application. Organizations utilizing these versions should prioritize implementing security measures to safeguard their systems against such threats.

References