CVE-2023-47742: IBM QRadar Suite information dislosure
IBM QRadar Suite Products 1.10.12.0 through 1.10.18.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could disclose sensitive information using man in the middle techniques due to not correctly enforcing all aspects of certificate validation in some circumstances. IBM X-Force ID: 272533.
Other sources
IBM QRadar Suite Products could disclose sensitive information using man in the middle techniques due to not correctly enforcing all aspects of certificate validation in some circumstances.
— IBM
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-47742?
CVE-2023-47742 has a severity rating that indicates a medium risk due to the potential for sensitive information disclosure.
How do I fix CVE-2023-47742?
To fix CVE-2023-47742, update IBM QRadar Suite Products to version 1.10.19 or later and IBM Cloud Pak for Security to version 1.10.12 or later.
What products are affected by CVE-2023-47742?
CVE-2023-47742 affects IBM QRadar Suite Products versions 1.10.12.0 through 1.10.18.0 and IBM Cloud Pak for Security versions 1.10.0.0 through 1.10.11.0.
What type of attack does CVE-2023-47742 enable?
CVE-2023-47742 enables man-in-the-middle attacks due to improper certificate validation enforcement.
Is there a workaround for CVE-2023-47742?
Currently, the recommended action for CVE-2023-47742 is to apply the latest software updates rather than a workaround.