CyberSec.Space Logo
Back to CVE Browser

CVE-2023-27877

MEDIUM
5.3
CVSS Severity Score
EPSS Score0.0000%
EPSS Percentile0.00th
Published2023-07-19
Last Modified2026-06-17
Data SourcesNVD

Vulnerability Description

IBM Planning Analytics Cartridge for Cloud Pak for Data 4.0 connects to a CouchDB server. An attacker can exploit an insecure password policy to the CouchDB server and collect sensitive information from the database. IBM X-Force ID: 247905.

Affected Platforms (CPE)

📦
Ibm

Cloud Pak For Data

= 4.0

References & Advisories

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/247905
🔗 https://www.ibm.com/support/pages/node/6999351
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/247905
🔗 https://www.ibm.com/support/pages/node/6999351

Related Vulnerabilities

CVE-2026-491587.5

Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift Ruby bindings. This issue affects...

CVE-2026-485868.7

Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift C++, Java, Python, Go, D, C/GLib b...

CVE-2026-41608

Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift Python bindings. This issue affec...

CVE-2026-175277.7

In containerized-data-importer (CDI), the aggregated cdi.kubevirt.io:view ClusterRole, intended to provide read-only access to CDI...