CVE-2023-47722 IBM API Connect information disclosure
Local users can read stored user credentials from the browser cache in IBM API Connect, leading to potential credential theft.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-47722?
CVE-2023-47722 is a medium-severity vulnerability in Ibm Api Connect, published on 9 Dec 2023. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
IBM API Connect V10.0.5.3 and V10.0.6.0 stores user credentials in browser cache which can be read by a local user. IBM X-Force ID: 271912.
Weakness: CWE-522
Which versions are affected by CVE-2023-47722?
It affects 1 product.
Products include Ibm Api Connect.
How do I fix CVE-2023-47722?
No fix has been published for CVE-2023-47722 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-47722 being exploited?
There is no known exploitation of CVE-2023-47722 in the wild and no public exploit code.
Other vulnerabilities in Ibm Api Connect
Sources
Also known as GHSA-hq7q-jpfq-95p9.