CVE-2023-23469 - Vulnerability Details

Vendors	Products
Ibm	Cloud Pak For Business Automation

Link	Providers
https://exchange.xforce.ibmcloud.com/vulnerabilities/244504
https://www.ibm.com/support/pages/node/6857999

Type	Values Removed	Values Added
Weaknesses		CWE-525
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-23469", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "state": "PUBLISHED", "assignerShortName": "ibm", "dateReserved": "2023-01-12T16:24:46.603Z", "datePublished": "2023-02-01T18:12:22.589Z", "dateUpdated": "2025-03-26T15:08:13.712Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "Cloud Pak for Business Automation", "vendor": "IBM", "versions": [{"status": "affected", "version": "18.0.0, 18.0.1,18.0.2,19.0.1,19.0.2,19.0.3,20.0.1,20.0.2,20.0.3,21.0.1,21.0.2,21.0.3,22.0.1,22.0.2"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "\n\n<span style=\"background-color: rgb(204, 217, 226);\">IBM ICP4A - Automation Decision Services 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 244504.</span>\n\n"}], "value": "\nIBM ICP4A - Automation Decision Services 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 244504.\n\n"}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 4, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"description": "525 Information Exposure Through Browser Caching", "lang": "en"}]}], "providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2023-02-01T18:12:22.589Z"}, "references": [{"tags": ["vendor-advisory"], "url": "https://www.ibm.com/support/pages/node/6857999"}, {"tags": ["vdb-entry"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/244504"}], "source": {"discovery": "UNKNOWN"}, "title": "IBM Cloud Pak for Business Automation information disclosure", "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T10:28:40.942Z"}, "title": "CVE Program Container", "references": [{"tags": ["vendor-advisory", "x_transferred"], "url": "https://www.ibm.com/support/pages/node/6857999"}, {"tags": ["vdb-entry", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/244504"}]}, {"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-525", "lang": "en", "description": "CWE-525 Use of Web Browser Cache Containing Sensitive Information"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-03-26T15:06:44.232829Z", "id": "CVE-2023-23469", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-03-26T15:08:13.712Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2023-23469 (string)

assignerOrgId : 9a959283-ebb5-44b6-b705-dcc2bbced522 (string)

state : PUBLISHED (string)

assignerShortName : ibm (string)

dateReserved : 2023-01-12T16:24:46.603Z (string)

datePublished : 2023-02-01T18:12:22.589Z (string)

dateUpdated : 2025-03-26T15:08:13.712Z (string)

}

containers : { »

cna : { »

affected : [ »

0 : { »

defaultStatus : unaffected (string)

product : Cloud Pak for Business Automation (string)

vendor : IBM (string)

versions : [ »

0 : { »

status : affected (string)

version : 18.0.0, 18.0.1,18.0.2,19.0.1,19.0.2,19.0.3,20.0.1,20.0.2,20.0.3,21.0.1,21.0.2,21.0.3,22.0.1,22.0.2 (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

supportingMedia : [ »

0 : { »

base64 : false (boolean)

type : text/html (string)

value : <span style="background-color: rgb(204, 217, 226);">IBM ICP4A - Automation Decision Services 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 244504.</span> (string)

}

]

value : IBM ICP4A - Automation Decision Services 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 244504. (string)

}

]

metrics : [ »

0 : { »

cvssV3_1 : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : NONE (string)

baseScore : 4 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : LOW (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N (string)

version : 3.1 (string)

}

format : CVSS (string)

scenarios : [ »

0 : { »

lang : en (string)

value : GENERAL (string)

}

]

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

description : 525 Information Exposure Through Browser Caching (string)

lang : en (string)

}

]

}

]

providerMetadata : { »

orgId : 9a959283-ebb5-44b6-b705-dcc2bbced522 (string)

shortName : ibm (string)

dateUpdated : 2023-02-01T18:12:22.589Z (string)

}

references : [ »

0 : { »

tags : [ »

0 : vendor-advisory (string)

]

url : https://www.ibm.com/support/pages/node/6857999 (string)

}

1 : { »

tags : [ »

0 : vdb-entry (string)

]

url : https://exchange.xforce.ibmcloud.com/vulnerabilities/244504 (string)

}

]

source : { »

discovery : UNKNOWN (string)

}

title : IBM Cloud Pak for Business Automation information disclosure (string)

x_generator : { »

engine : Vulnogram 0.1.0-dev (string)

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-02T10:28:40.942Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

tags : [ »

0 : vendor-advisory (string)

1 : x_transferred (string)

]

url : https://www.ibm.com/support/pages/node/6857999 (string)

}

1 : { »

tags : [ »

0 : vdb-entry (string)

1 : x_transferred (string)

]

url : https://exchange.xforce.ibmcloud.com/vulnerabilities/244504 (string)

}

]

}

1 : { »

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

type : CWE (string)

cweId : CWE-525 (string)

lang : en (string)

description : CWE-525 Use of Web Browser Cache Containing Sensitive Information (string)

}

]

}

]

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2025-03-26T15:06:44.232829Z (string)

id : CVE-2023-23469 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-03-26T15:08:13.712Z (string)

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://www.ibm.com/support/pages/node/6857999", "tags": ["vendor-advisory", "x_transferred"]}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/244504", "tags": ["vdb-entry", "x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T10:28:40.942Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-23469", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-03-26T15:06:44.232829Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-525", "description": "CWE-525 Use of Web Browser Cache Containing Sensitive Information"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-03-26T15:07:09.727Z"}}], "cna": {"title": "IBM Cloud Pak for Business Automation information disclosure", "source": {"discovery": "UNKNOWN"}, "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "IBM", "product": "Cloud Pak for Business Automation", "versions": [{"status": "affected", "version": "18.0.0, 18.0.1,18.0.2,19.0.1,19.0.2,19.0.3,20.0.1,20.0.2,20.0.3,21.0.1,21.0.2,21.0.3,22.0.1,22.0.2"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://www.ibm.com/support/pages/node/6857999", "tags": ["vendor-advisory"]}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/244504", "tags": ["vdb-entry"]}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "\nIBM ICP4A - Automation Decision Services 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 244504.\n\n", "supportingMedia": [{"type": "text/html", "value": "\n\n<span style=\"background-color: rgb(204, 217, 226);\">IBM ICP4A - Automation Decision Services 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 244504.</span>\n\n", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "525 Information Exposure Through Browser Caching"}]}], "providerMetadata": {"orgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "shortName": "ibm", "dateUpdated": "2023-02-01T18:12:22.589Z"}}}, "cveMetadata": {"cveId": "CVE-2023-23469", "state": "PUBLISHED", "dateUpdated": "2025-03-26T15:08:13.712Z", "dateReserved": "2023-01-12T16:24:46.603Z", "assignerOrgId": "9a959283-ebb5-44b6-b705-dcc2bbced522", "datePublished": "2023-02-01T18:12:22.589Z", "assignerShortName": "ibm"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://www.ibm.com/support/pages/node/6857999 (string)

tags : [ »

0 : vendor-advisory (string)

1 : x_transferred (string)

]

}

1 : { »

url : https://exchange.xforce.ibmcloud.com/vulnerabilities/244504 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_transferred (string)

]

}

]

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-02T10:28:40.942Z (string)

}

1 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2023-23469 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

version : 2.0.3 (string)

timestamp : 2025-03-26T15:06:44.232829Z (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : CWE (string)

cweId : CWE-525 (string)

description : CWE-525 Use of Web Browser Cache Containing Sensitive Information (string)

}

]

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-03-26T15:07:09.727Z (string)

}

]

cna : { »

title : IBM Cloud Pak for Business Automation information disclosure (string)

source : { »

discovery : UNKNOWN (string)

}

metrics : [ »

0 : { »

format : CVSS (string)

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 4 (number)

attackVector : LOCAL (string)

baseSeverity : MEDIUM (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N (string)

integrityImpact : NONE (string)

userInteraction : NONE (string)

attackComplexity : LOW (string)

availabilityImpact : NONE (string)

privilegesRequired : NONE (string)

confidentialityImpact : LOW (string)

}

scenarios : [ »

0 : { »

lang : en (string)

value : GENERAL (string)

}

]

}

]

affected : [ »

0 : { »

vendor : IBM (string)

product : Cloud Pak for Business Automation (string)

versions : [ »

0 : { »

status : affected (string)

version : 18.0.0, 18.0.1,18.0.2,19.0.1,19.0.2,19.0.3,20.0.1,20.0.2,20.0.3,21.0.1,21.0.2,21.0.3,22.0.1,22.0.2 (string)

}

]

defaultStatus : unaffected (string)

}

]

references : [ »

0 : { »

url : https://www.ibm.com/support/pages/node/6857999 (string)

tags : [ »

0 : vendor-advisory (string)

]

}

1 : { »

url : https://exchange.xforce.ibmcloud.com/vulnerabilities/244504 (string)

tags : [ »

0 : vdb-entry (string)

]

}

]

x_generator : { »

engine : Vulnogram 0.1.0-dev (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : IBM ICP4A - Automation Decision Services 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 244504. (string)

supportingMedia : [ »

0 : { »

type : text/html (string)

value : <span style="background-color: rgb(204, 217, 226);">IBM ICP4A - Automation Decision Services 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 244504.</span> (string)

base64 : false (boolean)

}

]

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

description : 525 Information Exposure Through Browser Caching (string)

}

]

}

]

providerMetadata : { »

orgId : 9a959283-ebb5-44b6-b705-dcc2bbced522 (string)

shortName : ibm (string)

dateUpdated : 2023-02-01T18:12:22.589Z (string)

}

cveMetadata : { »

cveId : CVE-2023-23469 (string)

state : PUBLISHED (string)

dateUpdated : 2025-03-26T15:08:13.712Z (string)

dateReserved : 2023-01-12T16:24:46.603Z (string)

assignerOrgId : 9a959283-ebb5-44b6-b705-dcc2bbced522 (string)

datePublished : 2023-02-01T18:12:22.589Z (string)

assignerShortName : ibm (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ibm:cloud_pak_for_business_automation:*:*:*:*:*:*:*:*", "matchCriteriaId": "7452A304-5579-42B5-BE6E-3A8D52E5BC2E", "versionEndIncluding": "20.0.3", "versionStartIncluding": "18.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.1:-:*:*:*:*:*:*", "matchCriteriaId": "AF7E2601-47E6-4111-9DE0-C3C01705884A", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.1:interim_fix_001:*:*:*:*:*:*", "matchCriteriaId": "AECC2FB4-0D29-45DB-AB55-B6C6C6A8BB2B", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.1:interim_fix_002:*:*:*:*:*:*", "matchCriteriaId": "B8F5E495-92A5-419D-884B-C82D6AA5B56B", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.1:interim_fix_003:*:*:*:*:*:*", "matchCriteriaId": "508939AF-58FC-4E12-B4E2-B11865B603F8", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.1:interim_fix_004:*:*:*:*:*:*", "matchCriteriaId": "C5B419DE-4597-4A33-861D-5530BDA9E679", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.1:interim_fix_005:*:*:*:*:*:*", "matchCriteriaId": "00EE653A-0EAD-489B-9610-6BEE3295AAEF", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.1:interim_fix_006:*:*:*:*:*:*", "matchCriteriaId": "06B644E7-7EB2-4AB6-9D30-EA0602373FD0", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.1:interim_fix_007:*:*:*:*:*:*", "matchCriteriaId": "838846CB-8436-40D1-9C3B-FBA2426351E8", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.2:-:*:*:*:*:*:*", "matchCriteriaId": "BA799229-3577-409F-BFCC-0ABA541EA710", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.2:interim_fix_001:*:*:*:*:*:*", "matchCriteriaId": "5EB47B7D-C408-4ED1-9D98-8BF77FFEF8AF", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.2:interim_fix_0012:*:*:*:*:*:*", "matchCriteriaId": "02D22CC4-3541-4BAA-8B45-FEB41F2E1697", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.2:interim_fix_002:*:*:*:*:*:*", "matchCriteriaId": "E8859A71-36FD-4E83-B8C6-BEEF772AB084", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.2:interim_fix_003:*:*:*:*:*:*", "matchCriteriaId": "AAEF9352-EDCB-4D16-B3F9-11962D3E9F50", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.2:interim_fix_004:*:*:*:*:*:*", "matchCriteriaId": "F5C8892F-A803-4E3F-8992-5011B2E73C3D", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.2:interim_fix_005:*:*:*:*:*:*", "matchCriteriaId": "4890680E-8D82-46DB-9346-3C26D8C9F7A7", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.2:interim_fix_006:*:*:*:*:*:*", "matchCriteriaId": "4F11DDE3-29C4-4CC4-AF73-DF7CCC73D5FB", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.2:interim_fix_007:*:*:*:*:*:*", "matchCriteriaId": "358590C1-6CAF-4FA7-9975-C9DD41242B1C", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.2:interim_fix_008:*:*:*:*:*:*", "matchCriteriaId": "9C2A88F1-55B3-43A9-8051-71C467A6712F", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.2:interim_fix_009:*:*:*:*:*:*", "matchCriteriaId": "E06C0789-2CC4-4D57-87D0-C0FAB9DB1B7D", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.3:-:*:*:*:*:*:*", "matchCriteriaId": "A8D6EB68-3804-494D-B12A-2E96E31D1B1A", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.3:interim_fix_001:*:*:*:*:*:*", "matchCriteriaId": "21D8DE68-5651-4068-B978-79B28F2DC5D6", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.3:interim_fix_002:*:*:*:*:*:*", "matchCriteriaId": "BBEA972A-A41E-44C9-8D35-1A991D3384B7", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.3:interim_fix_003:*:*:*:*:*:*", "matchCriteriaId": "D3009F4E-7157-43D3-B6A0-2531CDE619BE", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.3:interim_fix_004:*:*:*:*:*:*", "matchCriteriaId": "1DA97C23-9B80-4956-9873-317902A0D804", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.3:interim_fix_005:*:*:*:*:*:*", "matchCriteriaId": "1D0B6203-C775-4C5E-BAE9-C956E718F261", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.3:interim_fix_006:*:*:*:*:*:*", "matchCriteriaId": "257A7A17-7EDF-4E23-88A6-216BC29EC467", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.3:interim_fix_007:*:*:*:*:*:*", "matchCriteriaId": "26FF217B-1BD4-46E5-8023-2B2989FF7868", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.3:interim_fix_008:*:*:*:*:*:*", "matchCriteriaId": "C60E58EA-C4D5-4D4D-8C9B-3EC33A7027E4", "vulnerable": true}, {"criteria": "cpe:2.3:a:ibm:cloud_pak_for_business_automation:22.0.2:-:*:*:*:*:*:*", "matchCriteriaId": "517C5EDE-5104-4E22-B9C6-64DFBA7650C3", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "\nIBM ICP4A - Automation Decision Services 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 244504.\n\n"}], "id": "CVE-2023-23469", "lastModified": "2025-03-26T15:15:46.320", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 4.0, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.5, "impactScore": 1.4, "source": "psirt@us.ibm.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 3.3, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 1.4, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2023-02-01T19:15:08.690", "references": [{"source": "psirt@us.ibm.com", "tags": ["Broken Link"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/244504"}, {"source": "psirt@us.ibm.com", "tags": ["Vendor Advisory"], "url": "https://www.ibm.com/support/pages/node/6857999"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/244504"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://www.ibm.com/support/pages/node/6857999"}], "sourceIdentifier": "psirt@us.ibm.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-525"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:ibm:cloud_pak_for_business_automation:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 7452A304-5579-42B5-BE6E-3A8D52E5BC2E (string)

versionEndIncluding : 20.0.3 (string)

versionStartIncluding : 18.0.0 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.1:-:*:*:*:*:*:* (string)

matchCriteriaId : AF7E2601-47E6-4111-9DE0-C3C01705884A (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.1:interim_fix_001:*:*:*:*:*:* (string)

matchCriteriaId : AECC2FB4-0D29-45DB-AB55-B6C6C6A8BB2B (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.1:interim_fix_002:*:*:*:*:*:* (string)

matchCriteriaId : B8F5E495-92A5-419D-884B-C82D6AA5B56B (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.1:interim_fix_003:*:*:*:*:*:* (string)

matchCriteriaId : 508939AF-58FC-4E12-B4E2-B11865B603F8 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.1:interim_fix_004:*:*:*:*:*:* (string)

matchCriteriaId : C5B419DE-4597-4A33-861D-5530BDA9E679 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.1:interim_fix_005:*:*:*:*:*:* (string)

matchCriteriaId : 00EE653A-0EAD-489B-9610-6BEE3295AAEF (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.1:interim_fix_006:*:*:*:*:*:* (string)

matchCriteriaId : 06B644E7-7EB2-4AB6-9D30-EA0602373FD0 (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.1:interim_fix_007:*:*:*:*:*:* (string)

matchCriteriaId : 838846CB-8436-40D1-9C3B-FBA2426351E8 (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.2:-:*:*:*:*:*:* (string)

matchCriteriaId : BA799229-3577-409F-BFCC-0ABA541EA710 (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.2:interim_fix_001:*:*:*:*:*:* (string)

matchCriteriaId : 5EB47B7D-C408-4ED1-9D98-8BF77FFEF8AF (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.2:interim_fix_0012:*:*:*:*:*:* (string)

matchCriteriaId : 02D22CC4-3541-4BAA-8B45-FEB41F2E1697 (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.2:interim_fix_002:*:*:*:*:*:* (string)

matchCriteriaId : E8859A71-36FD-4E83-B8C6-BEEF772AB084 (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.2:interim_fix_003:*:*:*:*:*:* (string)

matchCriteriaId : AAEF9352-EDCB-4D16-B3F9-11962D3E9F50 (string)

vulnerable : true (boolean)

}

14 : { »

criteria : cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.2:interim_fix_004:*:*:*:*:*:* (string)

matchCriteriaId : F5C8892F-A803-4E3F-8992-5011B2E73C3D (string)

vulnerable : true (boolean)

}

15 : { »

criteria : cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.2:interim_fix_005:*:*:*:*:*:* (string)

matchCriteriaId : 4890680E-8D82-46DB-9346-3C26D8C9F7A7 (string)

vulnerable : true (boolean)

}

16 : { »

criteria : cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.2:interim_fix_006:*:*:*:*:*:* (string)

matchCriteriaId : 4F11DDE3-29C4-4CC4-AF73-DF7CCC73D5FB (string)

vulnerable : true (boolean)

}

17 : { »

criteria : cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.2:interim_fix_007:*:*:*:*:*:* (string)

matchCriteriaId : 358590C1-6CAF-4FA7-9975-C9DD41242B1C (string)

vulnerable : true (boolean)

}

18 : { »

criteria : cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.2:interim_fix_008:*:*:*:*:*:* (string)

matchCriteriaId : 9C2A88F1-55B3-43A9-8051-71C467A6712F (string)

vulnerable : true (boolean)

}

19 : { »

criteria : cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.2:interim_fix_009:*:*:*:*:*:* (string)

matchCriteriaId : E06C0789-2CC4-4D57-87D0-C0FAB9DB1B7D (string)

vulnerable : true (boolean)

}

20 : { »

criteria : cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.3:-:*:*:*:*:*:* (string)

matchCriteriaId : A8D6EB68-3804-494D-B12A-2E96E31D1B1A (string)

vulnerable : true (boolean)

}

21 : { »

criteria : cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.3:interim_fix_001:*:*:*:*:*:* (string)

matchCriteriaId : 21D8DE68-5651-4068-B978-79B28F2DC5D6 (string)

vulnerable : true (boolean)

}

22 : { »

criteria : cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.3:interim_fix_002:*:*:*:*:*:* (string)

matchCriteriaId : BBEA972A-A41E-44C9-8D35-1A991D3384B7 (string)

vulnerable : true (boolean)

}

23 : { »

criteria : cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.3:interim_fix_003:*:*:*:*:*:* (string)

matchCriteriaId : D3009F4E-7157-43D3-B6A0-2531CDE619BE (string)

vulnerable : true (boolean)

}

24 : { »

criteria : cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.3:interim_fix_004:*:*:*:*:*:* (string)

matchCriteriaId : 1DA97C23-9B80-4956-9873-317902A0D804 (string)

vulnerable : true (boolean)

}

25 : { »

criteria : cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.3:interim_fix_005:*:*:*:*:*:* (string)

matchCriteriaId : 1D0B6203-C775-4C5E-BAE9-C956E718F261 (string)

vulnerable : true (boolean)

}

26 : { »

criteria : cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.3:interim_fix_006:*:*:*:*:*:* (string)

matchCriteriaId : 257A7A17-7EDF-4E23-88A6-216BC29EC467 (string)

vulnerable : true (boolean)

}

27 : { »

criteria : cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.3:interim_fix_007:*:*:*:*:*:* (string)

matchCriteriaId : 26FF217B-1BD4-46E5-8023-2B2989FF7868 (string)

vulnerable : true (boolean)

}

28 : { »

criteria : cpe:2.3:a:ibm:cloud_pak_for_business_automation:21.0.3:interim_fix_008:*:*:*:*:*:* (string)

matchCriteriaId : C60E58EA-C4D5-4D4D-8C9B-3EC33A7027E4 (string)

vulnerable : true (boolean)

}

29 : { »

criteria : cpe:2.3:a:ibm:cloud_pak_for_business_automation:22.0.2:-:*:*:*:*:*:* (string)

matchCriteriaId : 517C5EDE-5104-4E22-B9C6-64DFBA7650C3 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : IBM ICP4A - Automation Decision Services 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 244504. (string)

}

]

id : CVE-2023-23469 (string)

lastModified : 2025-03-26T15:15:46.320 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : NONE (string)

baseScore : 4 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : LOW (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N (string)

version : 3.1 (string)

}

exploitabilityScore : 2.5 (number)

impactScore : 1.4 (number)

source : psirt@us.ibm.com (string)

type : Secondary (string)

}

1 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : NONE (string)

baseScore : 3.3 (number)

baseSeverity : LOW (string)

confidentialityImpact : LOW (string)

integrityImpact : NONE (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N (string)

version : 3.1 (string)

}

exploitabilityScore : 1.8 (number)

impactScore : 1.4 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2023-02-01T19:15:08.690 (string)

references : [ »

0 : { »

source : psirt@us.ibm.com (string)

tags : [ »

0 : Broken Link (string)

]

url : https://exchange.xforce.ibmcloud.com/vulnerabilities/244504 (string)

}

1 : { »

source : psirt@us.ibm.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://www.ibm.com/support/pages/node/6857999 (string)

}

2 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Broken Link (string)

]

url : https://exchange.xforce.ibmcloud.com/vulnerabilities/244504 (string)

}

3 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://www.ibm.com/support/pages/node/6857999 (string)

}

]

sourceIdentifier : psirt@us.ibm.com (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : NVD-CWE-noinfo (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

1 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-525 (string)

}

]

source : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

type : Secondary (string)

}

]

}

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object