{"id":"CVE-2023-23469","aliases":["EUVD-2023-27569","GHSA-hq8f-55fx-pqv7"],"status":"published","title":"IBM Cloud Pak for Business Automation information disclosure","description":"IBM ICP4A - Automation Decision Services 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 244504.","severity":{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00179,"percentile":0.07533,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-525"],"published":"2023-02-01T18:12:22Z","modified":"2026-06-17T05:37:13Z","products":[{"vendor":"ibm","product":"cloud pak for business automation"},{"vendor":"ibm","product":"cloud_pak_for_business_automation"}],"references":[{"url":"https://www.ibm.com/support/pages/node/6857999","tags":["vendor-advisory","x_transferred","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/244504","tags":["vdb-entry","x_transferred","Broken Link"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-23469"},{"url":"https://github.com/advisories/GHSA-hq8f-55fx-pqv7"}],"sources":{"cve":[{"id":"CVE-2023-23469","title":"IBM Cloud Pak for Business Automation information disclosure","description":"\nIBM ICP4A - Automation Decision Services 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 244504.\n\n","status":"published","published":"2023-02-01T18:12:22.589Z","modified":"2025-03-26T15:08:13.712Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-525"],"updated_at":"2026-11-02T14:35:20.812737Z"}],"euvd":[{"id":"EUVD-2023-27569","description":"\nIBM ICP4A - Automation Decision Services 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 244504.\n\n","status":"published","published":"2023-02-01T18:12:22Z","modified":"2025-03-26T15:08:13Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T20:52:51.340114Z"}],"ghsa":[{"id":"GHSA-hq8f-55fx-pqv7","title":"IBM ICP4A - Automation Decision Services 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1,...","description":"IBM ICP4A - Automation Decision Services 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 244504.","status":"published","published":"2023-02-01T21:30:23Z","modified":"2025-03-26T15:33:11Z","cvss":[{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"cwes":["CWE-525"],"updated_at":"2026-11-02T15:00:27.57285Z"}],"nvd":[{"id":"CVE-2023-23469","description":"\nIBM ICP4A - Automation Decision Services 18.0.0, 18.0.1, 18.0.2, 19.0.1, 19.0.2, 19.0.3, 20.0.1, 20.0.2, 20.0.3, 21.0.1, 21.0.2, 21.0.3, 22.0.1, and 22.0.2 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 244504.\n\n","status":"published","published":"2023-02-01T19:15:08.69Z","modified":"2026-06-17T05:37:13.113Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":3.3,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-525"],"updated_at":"2026-11-02T14:07:46.064662Z"}]}}