Low · 3.1 CVE-2023-28953 EUVD-2023-32571GHSA-h2j9-wrpc-7mm8

IBM Cognos Analytics on Cloud Pak for Data improper access control

Published Jul 10, 2023 · Updated Feb 13, 2025 · Assigned by ibm

Vendor: IBM Product: Cognos Analytics Cartridge for Cloud Pak for Data

Description

IBM Cognos Analytics on Cloud Pak for Data 4.0 could allow an attacker to make system calls that might compromise the security of the containers due to misconfigured security context. IBM X-Force ID: 251465.

Affected products

Vendor	Product	Affected	Fixed
IBM	Cognos Analytics Cartridge for Cloud Pak for Data	4.0	—

References

https://www.ibm.com/support/pages/node/7006413 vendor-advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/251465 vdb-entry
https://security.netapp.com/advisory/ntap-20230814-0001/