CVE-2023-47742 MEDIUM

CVE-2023-47742: IBM QRadar Suite information dislosure

Vendor Ibm
Product QRadar Suite Products
Weakness CWE-295
Published March 3, 2024
Last update September 20, 2024
View on NVD All CVEs

CVSS base score

5.9/10
Attack vector Network
Attack complexity High
Privileges required None
User interaction None
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

IBM QRadar Suite Products 1.10.12.0 through 1.10.18.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could disclose sensitive information using man in the middle techniques due to not correctly enforcing all aspects of certificate validation in some circumstances. IBM X-Force ID: 272533.

Key dates

02Disclosure timeline

March 3, 2024 CVE published
September 20, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-5501 Improper Certificate Signature Verification in X.509 Chain Validation Allows Forged Leaf Certificates CVE-2025-59353 Manager generates mTLS certificates for arbitrary IP addresses CVE-2024-40702 IBM Cognos Controller improper certificate validation CVE-2026-39984 Sigstore Timestamp Authority has Improper Certificate Validation in verifier CVE-2023-29000 Nextcloud Desktop client does not verify received singed certificate in end-to-end encryption