Lucene search

PRIOn knowledge basePRION:CVE-2023-35896

HistoryNov 03, 2023 - 3:15 a.m.

Server side request forgery (ssrf)

2023-11-0303:15:00

PRIOn knowledge base

www.prio-n.com

ibm content navigator

vulnerability

server-side request forgery

ssrf

authenticated attacker

unauthorized requests

network enumeration

facilitating attacks

ibm x-force id 259247

5.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

13.1%

JSON

IBM Content Navigator 3.0.13 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 259247.

CPENameOperatorVersion
content_navigatoreq3.0.13

CPE	Name	Operator	Version
	content_navigator	eq	3.0.13

References

exchange.xforce.ibmcloud.com/vulnerabilities/259247

www.ibm.com/support/pages/node/7065203