IBM Planning Analytics Cartridge for Cloud Pak for Data 4.0 connects to a CouchDB server. An attacker can exploit an insecure password policy to the CouchDB server and collect sensitive information from the database. IBM X-Force ID: 247905.
References
Link | Resource |
---|---|
https://exchange.xforce.ibmcloud.com/vulnerabilities/247905 | VDB Entry Vendor Advisory |
https://www.ibm.com/support/pages/node/6999351 | Patch Vendor Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: ibm
Published: 2023-07-19T01:31:33.738Z
Updated: 2023-07-19T01:39:48.232Z
Reserved: 2023-03-06T20:01:56.637Z
Link: CVE-2023-27877
JSON object: View
NVD Information
Status : Analyzed
Published: 2023-07-19T02:15:09.460
Modified: 2023-07-28T15:43:49.117
Link: CVE-2023-27877
JSON object: View
Redhat Information
No data.