Security Dashboard Parameters Vulnerability
CVE-2023-47727

4.3MEDIUM

Key Information:

Vendor

IBM
Status
Cloud Pak For Security
Qradar Suite Software
Vendor
CVE Published:
2 May 2024

What is CVE-2023-47727?

IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 and IBM QRadar Suite Software 1.10.12.0 through 1.10.20.0 could allow an authenticated user to modify dashboard parameters due to improper input validation. IBM X-Force ID: 272089.

Affected Version(s)

Cloud Pak for Security 1.10.0.0 <= 1.10.11.0

QRadar Suite Software 1.10.12.0 <= 1.10.20.0

References

https://www.ibm.com/support/pages/node/7149968
vendor-advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/272089
vdb-entry

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Vincent Dragnea
.