CVE-2023-47709

CWE-78 — OS Command Injection3 documents3 sources
Severity
8.8HIGH
EPSS
0.4%
top 39.30%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Security Guardium
Timeline
PublishedMay 14

Description

IBM Security Guardium 11.3, 11.4, 11.5, and 12.0 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 271524.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:HExploitability: 2.3 | Impact: 6.0

Affected Packages2 packages

▶CVEListV5ibm/security_guardium11.3, 11.4, 11.5, 12.0
▶NVDibm/security_guardium4 versions+3

🔴Vulnerability Details

2
GHSA
GHSA-h399-7836-2p9c: IBM Security Guardium 11↗2024-05-14
▶
CVEList
IBM Security Guardium command injection↗2024-05-11
▶
CVE-2023-47709 (HIGH CVSS 8.8) | IBM Security Guardium 11.3 | cvebase.io