Lucene search
HistoryFeb 29, 2024 - 1:40 a.m.
CVE-2023-38372
ibm watson iot
unauthorized access
security token
impersonation
ibm x-force
CVSS3
5.9
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
5.7
Confidence
High
EPSS
0
Percentile
9.0%
An unauthorized attacker who has obtained an IBM Watson IoT Platform 1.0 security authentication token can use it to impersonate an authorized platform user. IBM X-Force ID: 261201.
Related
prion
prion
Authentication flaw
2024-02-29 01:40:00
cve
cve
CVE-2023-38372
2024-02-29 01:40:10
vulnrichment
vulnrichment
CVE-2023-38372 IBM Watson IoT Platform information disclosure
2024-02-29 00:23:56
cvelist
cvelist
CVE-2023-38372 IBM Watson IoT Platform information disclosure
2024-02-29 00:23:56
CVSS3
5.9
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
AI Score
5.7
Confidence
High
EPSS
0
Percentile
9.0%
Related for NVD:CVE-2023-38372