VulnerabilityModified
CVE-2022-43901
IBM WebSphere Automation for IBM Cloud Pak for Watson AIOps 1.4.3 could disclose sensitive information.
MEDIUM 5.5EPSS 0.20%
Does this matter?
Lower severity and a low EPSS score (0.20%). Track it; it rarely justifies an emergency change on its own.
Description
IBM WebSphere Automation for IBM Cloud Pak for Watson AIOps 1.4.3 could disclose sensitive information. An authenticated local attacker could exploit this vulnerability to possibly gain information to other IBM WebSphere Automation for IBM Cloud Pak for Watson AIOps components. IBM X-Force ID: 240829.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- EPSS
- 0.20% probability · 10th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-200, CWE-668
- Affected
- ibm/websphere automation for ibm cloud pak for watson aiops
- Source
- psirt@us.ibm.com
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/240829Broken Link, VDB Entry, Vendor Advisory
- https://www.ibm.com/support/pages/node/6842605Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/240829Broken Link, VDB Entry, Vendor Advisory
- https://www.ibm.com/support/pages/node/6842605Patch, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.