Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-47741

IBM i 7.3, 7.4, 7.5, IBM i Db2 Mirror for i 7.4 and 7.5 web browser clients may leave clear-text passwords in browser memory that can be viewed using common browser tools before the memory is garbage collected. A malicious actor with access to the victim's PC could exploit this vulnerability to gain access to the IBM i operating system. IBM X-Force ID: 272532.

Published

2023-12-18T20:15:08.213

Last Modified

2024-11-21T08:30:44.820

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.3 (MEDIUM)

Weaknesses
  • Type: Primary
    CWE-522
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application ibm db2_mirror_for_i 7.4 Yes
Application ibm db2_mirror_for_i 7.5 Yes
Application ibm i 7.3 Yes
Application ibm i 7.4 Yes
Application ibm i 7.5 Yes
References