CVE-2023-33842
MediumCVSS 6.2Exploitation Probability (EPSS)
Low risk9th percentile - higher than 9% of all known CVEs
Summary
IBM SPSS Modeler on Windows versions 17.0, 18.0, 18.2.2, 18.3, 18.4, and 18.5 requires the end user to have access to the server SSL key, which could allow a local user to decrypt and obtain sensitive information.
Risk Assessment
Access to the SSL key by a local user may lead to the disclosure of confidential data, posing a significant security risk to the organization.
Recommendation
It is recommended to restrict access to the SSL key to authorized users only and implement additional security measures to protect sensitive information.
Original NVD description (English source)
IBM SPSS Modeler on Windows 17.0, 18.0, 18.2.2, 18.3, 18.4, and 18.5 requires the end user to have access to the server SSL key which could allow a local user to decrypt and obtain sensitive information. IBM X-Force ID: 256117.