{"id":"CVE-2023-28953","aliases":["EUVD-2023-32571","GHSA-h2j9-wrpc-7mm8"],"status":"published","title":"IBM Cognos Analytics on Cloud Pak for Data improper access control","description":"IBM Cognos Analytics on Cloud Pak for Data 4.0 could allow an attacker to make system calls that might compromise the security of the containers due to misconfigured security context.  IBM X-Force ID:  251465.","severity":{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00724,"percentile":0.54343,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2023-07-10T00:17:30Z","modified":"2026-06-17T05:49:03Z","products":[{"vendor":"ibm","product":"cognos analytics cartridge for cloud pak for data"},{"vendor":"ibm","product":"cognos_analytics_cartridge_for_ibm_cloud_pak_for_data"}],"references":[{"url":"https://www.ibm.com/support/pages/node/7006413","tags":["vendor-advisory","x_transferred","Patch","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/251465","tags":["vdb-entry","x_transferred","VDB Entry","Vendor Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20230814-0001/","tags":["x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-28953"},{"url":"https://security.netapp.com/advisory/ntap-20230814-0001"},{"url":"https://github.com/advisories/GHSA-h2j9-wrpc-7mm8"}],"sources":{"cve":[{"id":"CVE-2023-28953","title":"IBM Cognos Analytics on Cloud Pak for Data improper access control","description":"IBM Cognos Analytics on Cloud Pak for Data 4.0 could allow an attacker to make system calls that might compromise the security of the containers due to misconfigured security context.  IBM X-Force ID:  251465.","status":"published","published":"2023-07-10T00:17:30.448Z","modified":"2025-02-13T16:48:57.459Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low","assessor":"cna"}],"updated_at":"2026-11-02T14:35:32.752775Z"}],"euvd":[{"id":"EUVD-2023-32571","description":"IBM Cognos Analytics on Cloud Pak for Data 4.0 could allow an attacker to make system calls that might compromise the security of the containers due to misconfigured security context.  IBM X-Force ID:  251465.","status":"published","published":"2023-07-10T00:17:30Z","modified":"2025-02-13T16:48:57Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-03T00:03:50.947767Z"}],"ghsa":[{"id":"GHSA-h2j9-wrpc-7mm8","title":"IBM Cognos Analytics on Cloud Pak for Data 4.0 could allow an attacker to make system calls that...","description":"IBM Cognos Analytics on Cloud Pak for Data 4.0 could allow an attacker to make system calls that might compromise the security of the containers due to misconfigured security context.  IBM X-Force ID:  251465.","status":"published","published":"2023-07-10T18:30:48Z","modified":"2024-04-04T05:52:02Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T14:56:36.514369Z"}],"nvd":[{"id":"CVE-2023-28953","description":"IBM Cognos Analytics on Cloud Pak for Data 4.0 could allow an attacker to make system calls that might compromise the security of the containers due to misconfigured security context.  IBM X-Force ID:  251465.","status":"published","published":"2023-07-10T16:15:50.257Z","modified":"2026-06-17T05:49:03.733Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low","assessor":"secondary"},{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:08:15.127597Z"}]}}