CVE-2023-47728

Published: Aug 16, 2024Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD (Secondary)

Description

IBM QRadar Suite Software 1.10.12.0 through 1.10.22.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the request. This information could be used in further attacks against the system. IBM X-Force ID: 272201.

Affected (2)

Products: Ibm: Cloud Pak For Security, Qradar Suite

2 products

Cloud Pak For Security

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Ibm Cloud Pak For Security	From 1.10.0.0 to 1.10.11.0
Ibm Qradar Suite	From 1.10.12.0 to 1.10.23.0

Related CWEs

Generation of Error Message Containing Sensitive Information

The product generates an error message that includes sensitive information about its environment, users, or associated data.

References (2)

https://exchange.xforce.ibmcloud.com/vulnerabilities/272201

Source: psirt@us.ibm.com

Broken Link

https://www.ibm.com/support/pages/node/7161427

Source: psirt@us.ibm.com

Vendor Advisory

Timeline

No history available yet.