Vulnerability · Published Jan 19, 2024 · Assigned by ibm
CVE-2023-38738IBM OpenPages with Watson information disclosure
Medium 6.8
In plain English
A medium-severity security flaw in OpenPages with Watson from IBM. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 45% of all known vulnerabilities).
Official description
IBM OpenPages with Watson 8.3 and 9.0 could provide weaker than expected security in a OpenPages environment using Native authentication. If OpenPages is using Native authentication an attacker with access to the OpenPages database could through a series of specially crafted steps could exploit this weakness and gain unauthorized access to other OpenPages accounts. IBM X-Force ID: 262594.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| IBM | OpenPages with Watson | 8.3, 9.0 |
Weakness: CWE-257 · Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N