CVE Vulnerabilities

CVE-2023-27545

Use of Web Browser Cache Containing Sensitive Information

Published: Feb 29, 2024 | Modified: Feb 29, 2024
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

IBM Watson CloudPak for Data Data Stores information disclosure 4.6.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 248947.

Weakness

The web application does not use an appropriate caching policy that specifies the extent to which each web page and associated form fields should be cached.

Potential Mitigations

References