{"id":"CVE-2022-38383","state":"PUBLISHED","title":"IBM Cloud Pak for Security information disclosure","description":"IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.11.0 and IBM QRadar Software Suite 1.10.12.0 through 1.10.21.0 allows web pages to be stored locally which can be read by another user on the system.  IBM X-Force ID:  233673.","publishedAt":"2024-06-28T19:03:43.269Z","updatedAt":"2024-08-03T10:54:03.714Z","severity":{"score":4,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","source":"ibm"},"assigner":"ibm","products":["IBM Cloud Pak for Security","IBM QRadar Suite Software"],"affected":[{"vendor":"IBM","product":"Cloud Pak for Security","defaultStatus":"unaffected","versions":[{"version":"1.10.0.0","status":"affected","lessThanOrEqual":"1.10.11.0","versionType":"semver"}],"cpes":["cpe:2.3:a:ibm:cloud_pak_for_security:1.10.0.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:cloud_pak_for_security:1.10.11.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:qradar_suite:1.10.12.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:qradar_suite:1.10.21.0:*:*:*:*:*:*:*"]},{"vendor":"IBM","product":"QRadar Suite Software","defaultStatus":"unaffected","versions":[{"version":"1.10.12.0","status":"affected","lessThanOrEqual":"1.10.21.0","versionType":"semver"}]}],"references":["https://www.ibm.com/support/pages/node/7158986","https://exchange.xforce.ibmcloud.com/vulnerabilities/233673"],"weaknesses":["CWE-525"],"ingestedAt":"2026-10-29T19:50:26.582Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/38xxx/CVE-2022-38383.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2022-38383","state":"PUBLISHED","datePublished":"2024-06-28T19:03:43.269Z","dateUpdated":"2024-08-03T10:54:03.714Z","assignerShortName":"ibm","assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateReserved":"2022-08-16T18:42:49.432Z"},"containers":{"cna":{"title":"IBM Cloud Pak for Security information disclosure","descriptions":[{"lang":"en","value":"IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.11.0 and IBM QRadar Software Suite 1.10.12.0 through 1.10.21.0 allows web pages to be stored locally which can be read by another user on the system.  IBM X-Force ID:  233673."}],"affected":[{"vendor":"IBM","product":"Cloud Pak for Security","defaultStatus":"unaffected","versions":[{"version":"1.10.0.0","status":"affected","lessThanOrEqual":"1.10.11.0","versionType":"semver"}],"cpes":["cpe:2.3:a:ibm:cloud_pak_for_security:1.10.0.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:cloud_pak_for_security:1.10.11.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:qradar_suite:1.10.12.0:*:*:*:*:*:*:*","cpe:2.3:a:ibm:qradar_suite:1.10.21.0:*:*:*:*:*:*:*"]},{"vendor":"IBM","product":"QRadar Suite Software","defaultStatus":"unaffected","versions":[{"version":"1.10.12.0","status":"affected","lessThanOrEqual":"1.10.21.0","versionType":"semver"}]}],"references":[{"url":"https://www.ibm.com/support/pages/node/7158986","tags":["vendor-advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/233673","tags":["vdb-entry"]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":4,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-525","description":"CWE-525 Information Exposure Through Browser Caching","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"ibm","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateUpdated":"2024-06-28T19:03:43.269Z"},"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-06-28T20:19:08.042873Z","id":"CVE-2022-38383","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-06-28T20:19:15.888Z"}},{"title":"CVE Program Container","references":[{"url":"https://www.ibm.com/support/pages/node/7158986","tags":["vendor-advisory","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/233673","tags":["vdb-entry","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T10:54:03.714Z"}}]}}}