CVE-2023-50959 - NVD | ByteOS Network

NVD Vulnerability Details :

CVE-2023-50959

Analyzed

More Info Official Page

Source-psirt@us.ibm.com

Published At-31 Mar, 2024 | 12:15

Updated At-02 Apr, 2024 | 17:56

IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2,19.0.1, 19.0.2, 19.0.3,20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1,2 2.0.2, 23.0.1, and 23.0.2 may allow end users to query more documents than expected from a connected Enterprise Content Management system when configured to use a system account. IBM X-Force ID: 275938.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	6.5	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Secondary	3.1	5.3	MEDIUM	CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Type: Primary

Version: 3.1

Base score: 6.5

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Type: Secondary

Version: 3.1

Base score: 5.3

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

CPE Matches

IBM Corporation

>>cloud_pak_for_business_automation>>18.0.0

cpe:2.3:a:ibm:cloud_pak_for_business_automation:18.0.0:*:*:*:*:*:*:*

IBM Corporation

>>cloud_pak_for_business_automation>>18.0.1

cpe:2.3:a:ibm:cloud_pak_for_business_automation:18.0.1:*:*:*:*:*:*:*

IBM Corporation

>>cloud_pak_for_business_automation>>18.0.2

cpe:2.3:a:ibm:cloud_pak_for_business_automation:18.0.2:*:*:*:*:*:*:*

IBM Corporation

>>cloud_pak_for_business_automation>>19.0.1

cpe:2.3:a:ibm:cloud_pak_for_business_automation:19.0.1:*:*:*:*:*:*:*

IBM Corporation

>>cloud_pak_for_business_automation>>19.0.2

cpe:2.3:a:ibm:cloud_pak_for_business_automation:19.0.2:*:*:*:*:*:*:*

IBM Corporation

>>cloud_pak_for_business_automation>>19.0.3

cpe:2.3:a:ibm:cloud_pak_for_business_automation:19.0.3:*:*:*:*:*:*:*

IBM Corporation

>>cloud_pak_for_business_automation>>20.0.1

cpe:2.3:a:ibm:cloud_pak_for_business_automation:20.0.1:*:*:*:*:*:*:*

IBM Corporation

>>cloud_pak_for_business_automation>>20.0.2

cpe:2.3:a:ibm:cloud_pak_for_business_automation:20.0.2:*:*:*:*:*:*:*

IBM Corporation

>>cloud_pak_for_business_automation>>20.0.3

cpe:2.3:a:ibm:cloud_pak_for_business_automation:20.0.3:*:*:*:*:*:*:*

IBM Corporation

>>cloud_pak_for_business_automation>>21.0.1

cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.1:-:*:*:*:*:*:*

IBM Corporation

>>cloud_pak_for_business_automation>>21.0.2

cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.2:-:*:*:*:*:*:*

IBM Corporation

>>cloud_pak_for_business_automation>>21.0.3

cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.3:-:*:*:*:*:*:*

IBM Corporation

>>cloud_pak_for_business_automation>>22.0.1

cpe:2.3:a:ibm:cloud_pak_for_business_automation:22.0.1:-:*:*:*:*:*:*

IBM Corporation

>>cloud_pak_for_business_automation>>22.0.2

cpe:2.3:a:ibm:cloud_pak_for_business_automation:22.0.2:-:*:*:*:*:*:*

IBM Corporation

>>cloud_pak_for_business_automation>>23.0.1

cpe:2.3:a:ibm:cloud_pak_for_business_automation:23.0.1:-:*:*:*:*:*:*

IBM Corporation

>>cloud_pak_for_business_automation>>23.0.2

cpe:2.3:a:ibm:cloud_pak_for_business_automation:23.0.2:-:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-Other	Primary	nvd@nist.gov
CWE-497	Secondary	psirt@us.ibm.com

CWE ID: NVD-CWE-Other

Type: Primary

Source: nvd@nist.gov

CWE ID: CWE-497

Type: Secondary

Source: psirt@us.ibm.com

References

Hyperlink	Source	Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/275938	psirt@us.ibm.com	VDB Entry Vendor Advisory
https://www.ibm.com/support/pages/node/7145492	psirt@us.ibm.com	Vendor Advisory

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/275938

Source: psirt@us.ibm.com

Resource:

VDB Entry

Vendor Advisory

Hyperlink: https://www.ibm.com/support/pages/node/7145492

Source: psirt@us.ibm.com

Resource:

Vendor Advisory