CVE-2022-36777: IBM Cloud Pak for Security information disclosure
First published: Mon Nov 20 2023(Updated: )
IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.11.0 and IBM QRadar Suite Software 1.10.12.0 through 1.10.16.0could allow an authenticated user to obtain sensitive version information that could aid in further attacks against the system. IBM X-Force ID: 233665.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Cloud Pak for Security | >=1.10.0.0<=1.10.11.0 | |
| IBM QRadar Suite | >=1.10.12.0<1.10.17.0 | |
| <=1.10.0.0 - 1.10.11.0 | ||
| <=1.10.12.0 - 1.10.16.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this security issue?
The vulnerability ID of this security issue is CVE-2022-36777.
What is the title of this vulnerability?
The title of this vulnerability is 'IBM Cloud Pak for Security information disclosure'.
What is the severity level of CVE-2022-36777?
The severity level of CVE-2022-36777 is medium with a value of 4.3.
What software products are affected by CVE-2022-36777?
IBM Cloud Pak for Security versions 1.10.0.0 to 1.10.11.0 and IBM QRadar Suite Software versions 1.10.12.0 to 1.10.16.0 are affected by CVE-2022-36777.
How can an authenticated user exploit CVE-2022-36777?
An authenticated user can exploit CVE-2022-36777 to obtain sensitive version information that could aid in further attacks against the system.
- collector/nvd-api
- agent/references
- agent/type
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/author
- agent/title
- agent/weakness
- agent/severity
- agent/description
- agent/softwarecombine
- agent/tags
- agent/event
- collector/ibm-support
- source/IBM
- agent/software-canonical-lookup
- vendor/ibm
- canonical/ibm cloud pak for security
- version/ibm cloud pak for security/1.10.0.0
- version/ibm cloud pak for security/1.10.11.0
- canonical/ibm qradar suite
- version/ibm qradar suite/1.10.12.0
- version/ibm cloud pak for security/1.10.0.0 - 1.10.11.0
- canonical/ibm qradar suite software
- version/ibm qradar suite software/1.10.12.0 - 1.10.16.0