How severe is CVE-2023-28953?

Low severity. CVSS v3 base score is 3.1 out of 10.

Vulnerability in IBM Cognos Analytics Cartridge For Cloud Pak Data

CVE-2023-28953

IBM Cognos Analytics on Cloud Pak for Data 4.0 could allow an attacker to make system calls that might compromise the security of the containers due to misconfigured security context. IBM X-Force ID: 251465.

EPSS: 0.007 (50.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 3.1 (Low). Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N.

Affected products

Ibm Cognos Analytics Cartridge For Cloud Pak Data — versions 4.0
Ibm Cognos_analytics_cartridge_for_ibm_cloud_pak_for_data

References

psirt@us.ibm.com (vendor-advisory, Patch, Vendor Advisory)
psirt@us.ibm.com (VDB Entry, vdb-entry, Vendor Advisory)
psirt@us.ibm.com

Frequently asked questions

What is CVE-2023-28953?: CVE-2023-28953 is a low-severity vulnerability in IBM Cognos Analytics Cartridge For Cloud Pak Data. CVSS score: 3.1/10. Published 2023-07-10.
How severe is CVE-2023-28953?: Low severity. CVSS v3 base score is 3.1 out of 10.