CVE-2023-40691

IBM Cloud Pak for Business Automation 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 may reveal sensitive information contained in application configuration to developer and administrator users.  IBM X-Force ID:  264805.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.9 MEDIUM
NETWORK
LOW
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
ibmCNA
4.9 MEDIUM
NETWORK
LOW
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 15%
VendorProductVersion
ibmcloud_pak_for_business_automation
18.0.0
ibmcloud_pak_for_business_automation
18.0.2
ibmcloud_pak_for_business_automation
19.0.1
ibmcloud_pak_for_business_automation
19.0.3
ibmcloud_pak_for_business_automation
20.0.1
ibmcloud_pak_for_business_automation
20.0.3
ibmcloud_pak_for_business_automation
21.0.1
ibmcloud_pak_for_business_automation
21.0.1:interim_fix_001
ibmcloud_pak_for_business_automation
21.0.1:interim_fix_002
ibmcloud_pak_for_business_automation
21.0.1:interim_fix_003
ibmcloud_pak_for_business_automation
21.0.1:interim_fix_004
ibmcloud_pak_for_business_automation
21.0.1:interim_fix_005
ibmcloud_pak_for_business_automation
21.0.1:interim_fix_006
ibmcloud_pak_for_business_automation
21.0.1:interim_fix_007
ibmcloud_pak_for_business_automation
21.0.1:interim_fix_008
ibmcloud_pak_for_business_automation
21.0.3
ibmcloud_pak_for_business_automation
21.0.3:interim_fix_001
ibmcloud_pak_for_business_automation
21.0.3:interim_fix_002
ibmcloud_pak_for_business_automation
21.0.3:interim_fix_003
ibmcloud_pak_for_business_automation
21.0.3:interim_fix_004
ibmcloud_pak_for_business_automation
21.0.3:interim_fix_005
ibmcloud_pak_for_business_automation
21.0.3:interim_fix_006
ibmcloud_pak_for_business_automation
21.0.3:interim_fix_007
ibmcloud_pak_for_business_automation
21.0.3:interim_fix_008
ibmcloud_pak_for_business_automation
21.0.3:interim_fix_009
ibmcloud_pak_for_business_automation
21.0.3:interim_fix_010
ibmcloud_pak_for_business_automation
21.0.3:interim_fix_011
ibmcloud_pak_for_business_automation
21.0.3:interim_fix_012
ibmcloud_pak_for_business_automation
21.0.3:interim_fix_013
ibmcloud_pak_for_business_automation
21.0.3:interim_fix_014
ibmcloud_pak_for_business_automation
21.0.3:interim_fix_015
ibmcloud_pak_for_business_automation
21.0.3:interim_fix_016
ibmcloud_pak_for_business_automation
21.0.3:interim_fix_017
ibmcloud_pak_for_business_automation
21.0.3:interim_fix_018
ibmcloud_pak_for_business_automation
21.0.3:interim_fix_019
ibmcloud_pak_for_business_automation
21.0.3:interim_fix_020
ibmcloud_pak_for_business_automation
21.0.3:interim_fix_021
ibmcloud_pak_for_business_automation
21.0.3:interim_fix_022
ibmcloud_pak_for_business_automation
21.0.3:interim_fix_023
ibmcloud_pak_for_business_automation
21.0.3:interim_fix_024
ibmcloud_pak_for_business_automation
21.0.3:interim_fix_025
ibmcloud_pak_for_business_automation
21.0.3:interim_fix_026
ibmcloud_pak_for_business_automation
22.0.2
ibmcloud_pak_for_business_automation
22.0.2:interim_fix_001
ibmcloud_pak_for_business_automation
22.0.2:interim_fix_002
ibmcloud_pak_for_business_automation
22.0.2:interim_fix_003
ibmcloud_pak_for_business_automation
22.0.2:interim_fix_004
ibmcloud_pak_for_business_automation
22.0.2:interim_fix_005
ibmcloud_pak_for_business_automation
22.0.2:interim_fix_006
ibmcloud_pak_for_business_automation
23.0.1
ibmcloud_pak_for_business_automation
23.0.1:interim_fix_001
ibmcloud_pak_for_business_automation
23.0.1:interim_fix_002
ibmcloud_pak_for_business_automation
23.0.1:interim_fix_003
ibmcloud_pak_for_business_automation
23.0.1:interim_fix_004
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://exchange.xforce.ibmcloud.com/vulnerabilities/264805
https://www.ibm.com/support/pages/node/7096365
https://exchange.xforce.ibmcloud.com/vulnerabilities/264805
https://www.ibm.com/support/pages/node/7096365