CVE-2023-50951

MEDIUM 4.3CVE-2023-50951 · Published 17/02/2024 · updated 17/06/2026

In short

CVE-2023-50951 is a MEDIUM (CVSS 4.3) vulnerability affecting cloud pak for security (ibm), qradar suite (ibm).
Chance of exploitation in the next 30 days (EPSS): 0.40%, higher than 34.7% of all vulnerabilities.
Fix: update to 1.10.18.0 or later.

Package	Affected versions	Patched versions
cloud pak for security ibm	`≥ 1.10.0.0, ≤ 1.10.11.0`	No fix yet
qradar suite ibm	`≥ 1.10.12.0, < 1.10.18.0`	`1.10.18.0`

Description

IBM QRadar Suite 1.10.12.0 through 1.10.17.0 and IBM Cloud Pak for Security 1.10.0.0 through 1.10.11.0 in some circumstances will log some sensitive information about invalid authorization attempts. IBM X-Force ID: 275747.

References

exchange.xforce.ibmcloud.com/vulnerabilities/275747 · VDB Entry
ibm.com/support/pages/node/7118604 · Vendor Advisory

More vulnerabilities in cloud pak for security

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

cloud pak for security

ibm

≥ 1.10.0.0, ≤ 1.10.11.0

No fix yet

qradar suite

ibm

≥ 1.10.12.0, < 1.10.18.0

1.10.18.0

More vulnerabilities in cloud pak for security

See all →