Lucene search

K
vulnrichmentIbmVULNRICHMENT:CVE-2023-47711
HistoryMay 11, 2024 - 1:18 p.m.

CVE-2023-47711 IBM Security Guardium denial of service

2024-05-1113:18:21
CWE-434
ibm
github.com
3
ibm security guardium
denial of service
authenticated user
upload files
ibm x-force id

CVSS3

2.7

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

AI Score

6.3

Confidence

High

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

IBM Security Guardium 11.3, 11.4, 11.5, and 12.0 could allow an authenticated user to upload files that would cause a denial of service. IBM X-Force ID: 271526.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:ibm:security_guardium:11.3:*:*:*:*:*:*:*"
    ],
    "vendor": "ibm",
    "product": "security_guardium",
    "versions": [
      {
        "status": "affected",
        "version": "11.3"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:a:ibm:security_guardium:11.4:*:*:*:*:*:*:*"
    ],
    "vendor": "ibm",
    "product": "security_guardium",
    "versions": [
      {
        "status": "affected",
        "version": "11.4"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:a:ibm:security_guardium:11.5:*:*:*:*:*:*:*"
    ],
    "vendor": "ibm",
    "product": "security_guardium",
    "versions": [
      {
        "status": "affected",
        "version": "11.5"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:a:ibm:security_guardium:12.0:*:*:*:*:*:*:*"
    ],
    "vendor": "ibm",
    "product": "security_guardium",
    "versions": [
      {
        "status": "affected",
        "version": "12.0"
      }
    ],
    "defaultStatus": "unknown"
  }
]

CVSS3

2.7

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

AI Score

6.3

Confidence

High

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2023-47711