VULNERABILITY INTELLIGENCE

CVE-2023-47742

CVSS score5.9 MEDIUM
EPSS probability0.25%
CISA KEVNot currently listed
Published2024-03-03
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

IBM QRadar Suite Products 1.10.12.0 through 1.10.18.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could disclose sensitive information using man in the middle techniques due to not correctly enforcing all aspects of certificate validation in some circumstances. IBM X-Force ID: 272533.

Weakness classification

  • psirt@us.ibm.com: CWE-295

Primary references