Lucene search
HistoryDec 01, 2022 - 7:15 p.m.
CVE-2022-43900
ibm
websphere
cloud pak
watson aiops
security
vulnerability
x-force
network connection
CVSS3
6.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N
EPSS
0
Percentile
5.1%
IBM WebSphere Automation for IBM Cloud Pak for Watson AIOps 1.4.2 could provide a weaker than expected security. A local attacker can create an outbound network connection to another system. IBM X-Force ID: 240827.
Affected configurations
Node
ibmwebsphere_automation_for_ibm_cloud_pak_for_watson_aiopsRange<1.4.3
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | websphere_automation_for_ibm_cloud_pak_for_watson_aiops | * | cpe:2.3:a:ibm:websphere_automation_for_ibm_cloud_pak_for_watson_aiops:*:*:*:*:*:*:*:* |
Related
prion
prion
Code injection
2022-12-01 19:15:00
cvelist
cvelist
cve
cve
CVE-2022-43900
2022-12-01 19:15:10
CVSS3
6.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N
EPSS
0
Percentile
5.1%
Related for NVD:CVE-2022-43900