CVE-2023-47722

IBM API Connect V10.0.5.3 and V10.0.6.0 stores user credentials in browser cache which can be read by a local user. IBM X-Force ID: 271912.

Score

CVSS 3.1 6.2 Medium

Status

Modified - psirt@us.ibm.com

Published

2023-12-09

Last modified

2024-08-02

Weaknesses

CWE-522

Affected products

• Api Connect (Ibm)

References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/271912
• https://www.ibm.com/support/pages/node/7087806