medium5.3
CVE-2023-27877
IBM Planning Analytics Cartridge for Cloud Pak for Data 4.0 connects to a CouchDB server.
Impact
IBM Planning Analytics Cartridge for Cloud Pak for Data 4.0 connects to a CouchDB server. An attacker can exploit an insecure password policy to the CouchDB server and collect sensitive information from the database. IBM X-Force ID: 247905.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Cloud Pak For Data | Version 4.0 |