{"api_version":"1","generated_at":"2026-07-23T12:58:15+00:00","cve":"CVE-2023-28953","urls":{"html":"https://cve.report/CVE-2023-28953","api":"https://cve.report/api/cve/CVE-2023-28953.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2023-28953","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2023-28953"},"summary":{"title":"CVE-2023-28953","description":"IBM Cognos Analytics on Cloud Pak for Data 4.0 could allow an attacker to make system calls that might compromise the security of the containers due to misconfigured security context.  IBM X-Force ID:  251465.","state":"PUBLIC","assigner":"psirt@us.ibm.com","published_at":"2023-07-10 16:15:00","updated_at":"2023-08-14 19:15:00"},"problem_types":["NVD-CWE-noinfo"],"metrics":[],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/251465","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/251465","refsource":"MISC","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://security.netapp.com/advisory/ntap-20230814-0001/","name":"https://security.netapp.com/advisory/ntap-20230814-0001/","refsource":"MISC","tags":[],"title":"CVE-2023-28953 IBM Cognos Vulnerability in NetApp Products | NetApp Product Security","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://www.ibm.com/support/pages/node/7006413","name":"https://www.ibm.com/support/pages/node/7006413","refsource":"MISC","tags":[],"title":"Security Bulletin: IBM Cognos Analytics Cartridge for IBM Cloud Pak for Data 4.7.0 has addressed a security vulnerability (CVE-2023-28953)","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-28953","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-28953","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2023","cve_id":"28953","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ibm","cpe5":"cognos_analytics_cartridge_for_ibm_cloud_pak_for_data","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"data_version":"4.0","data_type":"CVE","data_format":"MITRE","CVE_data_meta":{"ID":"CVE-2023-28953","ASSIGNER":"psirt@us.ibm.com","STATE":"PUBLIC"},"description":{"description_data":[{"lang":"eng","value":"IBM Cognos Analytics on Cloud Pak for Data 4.0 could allow an attacker to make system calls that might compromise the security of the containers due to misconfigured security context.  IBM X-Force ID:  251465."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"284 Improper Access Control"}]}]},"affects":{"vendor":{"vendor_data":[{"vendor_name":"IBM","product":{"product_data":[{"product_name":"Cognos Analytics Cartridge for Cloud Pak for Data","version":{"version_data":[{"version_affected":"=","version_value":"4.0"}]}}]}}]}},"references":{"reference_data":[{"url":"https://www.ibm.com/support/pages/node/7006413","refsource":"MISC","name":"https://www.ibm.com/support/pages/node/7006413"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/251465","refsource":"MISC","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/251465"},{"url":"https://security.netapp.com/advisory/ntap-20230814-0001/","refsource":"MISC","name":"https://security.netapp.com/advisory/ntap-20230814-0001/"}]},"generator":{"engine":"Vulnogram 0.1.0-dev"},"source":{"discovery":"UNKNOWN"},"impact":{"cvss":[{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":3.1,"baseSeverity":"LOW","confidentialityImpact":"NONE","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","version":"3.1"}]}},"nvd":{"publishedDate":"2023-07-10 16:15:00","lastModifiedDate":"2023-08-14 19:15:00","problem_types":["NVD-CWE-noinfo"],"metrics":{"baseMetricV3":{"cvssV3":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"NONE","baseScore":4.3,"baseSeverity":"MEDIUM"},"exploitabilityScore":2.8,"impactScore":1.4}},"configurations":{"CVE_data_version":"4.0","nodes":[{"operator":"OR","children":[],"cpe_match":[{"vulnerable":true,"cpe23Uri":"cpe:2.3:a:ibm:cognos_analytics_cartridge_for_ibm_cloud_pak_for_data:*:*:*:*:*:*:*:*","versionStartIncluding":"4.0","versionEndExcluding":"4.7","cpe_name":[]}]}]}},"legacy_mitre":{"record":null,"notes":[]}}}