VulnerabilityModified
CVE-2023-28953
IBM Cognos Analytics on Cloud Pak for Data 4.0 could allow an attacker to make system calls that might compromise the security of the containers due to misconfigured security context.
MEDIUM 4.3EPSS 0.72%
Does this matter?
Lower severity and a low EPSS score (0.72%). Track it; it rarely justifies an emergency change on its own.
Description
IBM Cognos Analytics on Cloud Pak for Data 4.0 could allow an attacker to make system calls that might compromise the security of the containers due to misconfigured security context. IBM X-Force ID: 251465.
- CVSS 3.1
- 4.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
- EPSS
- 0.72% probability · 52th percentile
- CISA KEV
- Not listed
- Affected
- ibm/cognos analytics cartridge for ibm cloud pak for data
- Source
- psirt@us.ibm.com
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/251465VDB Entry, Vendor Advisory
- https://security.netapp.com/advisory/ntap-20230814-0001/
- https://www.ibm.com/support/pages/node/7006413Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/251465VDB Entry, Vendor Advisory
- https://security.netapp.com/advisory/ntap-20230814-0001/
- https://www.ibm.com/support/pages/node/7006413Patch, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.