Security Bulletin: IBM Cognos Analytics Cartridge for IBM Cloud Pak for Data 4.7.0 has addressed a security vulnerability (CVE-2023-28953)

Summary

A security vulnerability exists in IBM Cognos Analytics Cartridge for IBM Cloud Pak for Data where the security context settings were missing and or configured incorrectly in pod specifications . Security Context has the greatest impact on reducing the attack surface and ignoring the seccomp setting would allow an attacker to make system calls that might compromise the security of the containers. This vulnerability has been addressed

Vulnerability Details

CVEID:CVE-2023-28953
**DESCRIPTION:**IBM Cognos Analytics on Cloud Pak for Data could allow an attacker to make system calls that might compromise the security of the containers due to misconfigured security context.
CVSS Base score: 3.1
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/251465 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N)

Affected Products and Versions

Remediation/Fixes

Workarounds and Mitigations

None