CVE-2022-38383

Summary

IBM Cloud Pak for Security (CP4S) 1.10.0.0 through 1.10.11.0 and IBM QRadar Software Suite 1.10.12.0 through 1.10.21.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 233673.

Affected Software

VendorProductVersion RangeStatus
IBMCloud Pak for Security1.10.0.0 <= 1.10.11.0affected
IBMQRadar Suite Software1.10.12.0 <= 1.10.21.0affected

Weaknesses

  • CWE-525: CWE-525 Information Exposure Through Browser Caching

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

CVE Program Container

Additional References

References