Skip to content
Sign in
5.3 Medium

CVE-2023-27877 IBM Planning Analytics Cartridge for Cloud Pak for Data 4.0 connects to a CouchDB server

Description

IBM Planning Analytics Cartridge for Cloud Pak for Data 4.0 connects to a CouchDB server. An attacker can exploit an insecure password policy to the CouchDB server and collect sensitive information from the database. IBM X-Force ID: 247905.

Affected products and versions

Product Affected versions Fixed in
Planning Analytics Cartridge for Cloud Pak for Data 4.0 No fix stated

Other CVEs of Planning Analytics Cartridge for Cloud Pak for Data

The 2 CVEs of Planning Analytics Cartridge for Cloud Pak for Data →
CVE-2023-26026 Planning Analytics Cartridge for Cloud Pak for Data 4.0 exposes sensitive information in logs which could lead an… 5.3 Medium
Track this CVE