{"id":"CVE-2023-47742","state":"PUBLISHED","title":"IBM QRadar Suite information dislosure","description":"IBM QRadar Suite Products 1.10.12.0 through 1.10.18.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could disclose sensitive information using man in the middle techniques due to not correctly enforcing all aspects of certificate validation in some circumstances.  IBM X-Force ID:  272533.","publishedAt":"2024-03-03T12:18:58.199Z","updatedAt":"2024-09-20T19:04:34.016Z","severity":{"score":5.9,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","source":"ibm"},"assigner":"ibm","products":["IBM QRadar Suite Products","IBM Cloud Pak for Security"],"affected":[{"vendor":"IBM","product":"QRadar Suite Products","defaultStatus":"unaffected","versions":[{"version":"1.10.12.0","status":"affected","lessThanOrEqual":"1.10.18.0","versionType":"semver"}]},{"vendor":"IBM","product":"Cloud Pak for Security","defaultStatus":"unaffected","versions":[{"version":"1.10.0.0","status":"affected","lessThanOrEqual":"1.10.11.0","versionType":"semver"}]}],"references":["https://www.ibm.com/support/pages/node/7129328","https://exchange.xforce.ibmcloud.com/vulnerabilities/272533"],"weaknesses":["CWE-295"],"ingestedAt":"2026-10-29T20:06:24.729Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/47xxx/CVE-2023-47742.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-47742","state":"PUBLISHED","datePublished":"2024-03-03T12:18:58.199Z","dateUpdated":"2024-09-20T19:04:34.016Z","assignerShortName":"ibm","assignerOrgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateReserved":"2023-11-09T11:31:41.193Z"},"containers":{"cna":{"title":"IBM QRadar Suite information dislosure","descriptions":[{"lang":"en","value":"IBM QRadar Suite Products 1.10.12.0 through 1.10.18.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could disclose sensitive information using man in the middle techniques due to not correctly enforcing all aspects of certificate validation in some circumstances.  IBM X-Force ID:  272533."}],"affected":[{"vendor":"IBM","product":"QRadar Suite Products","defaultStatus":"unaffected","versions":[{"version":"1.10.12.0","status":"affected","lessThanOrEqual":"1.10.18.0","versionType":"semver"}]},{"vendor":"IBM","product":"Cloud Pak for Security","defaultStatus":"unaffected","versions":[{"version":"1.10.0.0","status":"affected","lessThanOrEqual":"1.10.11.0","versionType":"semver"}]}],"references":[{"url":"https://www.ibm.com/support/pages/node/7129328","tags":["vendor-advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/272533","tags":["vdb-entry"]}],"metrics":[{"cvssV3_1":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.9,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-295","description":"CWE-295 Improper Certificate Validation","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"ibm","orgId":"9a959283-ebb5-44b6-b705-dcc2bbced522","dateUpdated":"2024-09-20T19:04:34.016Z"},"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2023-47742","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"version":"2.0.3","timestamp":"2024-03-05T20:15:15.701425Z"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-06-04T17:26:46.971Z"}},{"title":"CVE Program Container","references":[{"url":"https://www.ibm.com/support/pages/node/7129328","tags":["vendor-advisory","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/272533","tags":["vdb-entry","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T21:16:43.671Z"}}]}}}