CVE-2023-47742: IBM QRadar Suite information dislosure
First published: Fri Mar 01 2024(Updated: )
IBM QRadar Suite Products 1.10.12.0 through 1.10.18.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 could disclose sensitive information using man in the middle techniques due to not correctly enforcing all aspects of certificate validation in some circumstances. IBM X-Force ID: 272533.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Cloud Pak for Security | <=1.10.0.0 - 1.10.11.0 | |
| IBM QRadar Suite Software | <=1.10.12.0 - 1.10.18.0 | |
| IBM Cloud Pak for Security | >=1.10.0.0<=1.10.11.0 | |
| IBM QRadar Suite | >=1.10.12.0<=1.10.18.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2023-47742?
CVE-2023-47742 has a severity rating that indicates a medium risk due to the potential for sensitive information disclosure.
How do I fix CVE-2023-47742?
To fix CVE-2023-47742, update IBM QRadar Suite Products to version 1.10.19 or later and IBM Cloud Pak for Security to version 1.10.12 or later.
What products are affected by CVE-2023-47742?
CVE-2023-47742 affects IBM QRadar Suite Products versions 1.10.12.0 through 1.10.18.0 and IBM Cloud Pak for Security versions 1.10.0.0 through 1.10.11.0.
What type of attack does CVE-2023-47742 enable?
CVE-2023-47742 enables man-in-the-middle attacks due to improper certificate validation enforcement.
Is there a workaround for CVE-2023-47742?
Currently, the recommended action for CVE-2023-47742 is to apply the latest software updates rather than a workaround.
- agent/references
- agent/title
- agent/description
- agent/first-publish-date
- agent/type
- collector/ibm-support
- source/IBM
- agent/software-canonical-lookup
- agent/author
- agent/severity
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/trending
- collector/nvd-api
- source/NVD
- agent/last-modified-date
- agent/softwarecombine
- agent/tags
- agent/source
- vendor/ibm
- canonical/ibm cloud pak for security
- version/ibm cloud pak for security/1.10.0.0 - 1.10.11.0
- canonical/ibm qradar suite software
- version/ibm qradar suite software/1.10.12.0 - 1.10.18.0
- version/ibm cloud pak for security/1.10.0.0
- version/ibm cloud pak for security/1.10.11.0
- canonical/ibm qradar suite
- version/ibm qradar suite/1.10.12.0
- version/ibm qradar suite/1.10.18.0