CVE-2023-38738

Summary

IBM OpenPages with Watson 8.3 and 9.0 could provide weaker than expected security in a OpenPages environment using Native authentication. If OpenPages is using Native authentication an attacker with access to the OpenPages database could through a series of specially crafted steps could exploit this weakness and gain unauthorized access to other OpenPages accounts. IBM X-Force ID: 262594.

Affected Software

VendorProductVersion RangeStatus
IBMOpenPages with Watson8.3, 9.0affected

Weaknesses

  • CWE-257: CWE-257 Storing Passwords in a Recoverable Format

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References