CVE-2023-33842 MEDIUM

CVE-2023-33842: IBM SPSS Modeler information disclosure

Vendor Ibm
Product SPSS Modeler
Published June 22, 2023
Last update December 4, 2024
View on NVD All CVEs

CVSS base score

6.2/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

IBM SPSS Modeler on Windows 17.0, 18.0, 18.2.2, 18.3, 18.4, and 18.5 requires the end user to have access to the server SSL key which could allow a local user to decrypt and obtain sensitive information. IBM X-Force ID: 256117.

Key dates

02Disclosure timeline

June 22, 2023 CVE published
December 4, 2024 Record updated