Observable Response Discrepancy in IBM Common Licensing - CVE-2023-50306

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU86716

Observable Response Discrepancy in IBM Common Licensing - CVE-2023-50306

Published: February 22, 2024


Vulnerability identifier: #VU86716
CSH Severity: Low
CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2023-50306
CWE-ID: CWE-204
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local user to gain access to potentially sensitive information.

The vulnerability exists due to excessive data output by the application. A local user can enumerate usernames due to an observable response discrepancy to gain unauthorized access to sensitive information on the system.


Affected software

IBM Common Licensing
IBM Engineering Requirements Management DOORS Next

How to mitigate CVE-2023-50306

Install updates from vendor's website.

IBM Engineering Requirements Management DOORS Next - update to 9.7.2.8

External References

Related Security Bulletins