CVE-2022-38383 — Use of Web Browser Cache Containing Sensitive Information in IBM Cloud PAK FOR Security

CWE-525 — Use of Web Browser Cache Containing Sensitive Information3 documents3 sources
Severity
3.3LOWNVD
CNA4.0
EPSS
0.0%
top 86.03%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
IBM Cloud PAK FOR SecurityIBM Qradar Suite SoftwareIBM Qradar Suite
Timeline
PublishedJun 28
Latest updateJun 29

Description

IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.11.0 and IBM QRadar Software Suite 1.10.12.0 through 1.10.21.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 233673.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:NExploitability: 1.8 | Impact: 1.4

Affected Packages4 packages

▶CVEListV5ibm/qradar_suite_software1.10.12.0 — 1.10.21.0
▶NVDibm/qradar_suite1.10.12.0 — 1.10.21.0
▶CVEListV5ibm/cloud_pak_for_security1.10.0.0 — 1.10.11.0
▶NVDibm/cloud_pak1.10.0.0 — 1.10.11.0

🔴Vulnerability Details

2
GHSA
GHSA-jvqq-64w2-qq2f: IBM Cloud Pak for Security (CP4S) 1↗2024-06-29
▶
CVEList
IBM Cloud Pak for Security information disclosure↗2024-06-28
▶
CVE-2022-38383 — IBM vulnerability | cvebase