CVE-2023-47717: 
IBM Guardium Appliance vulnerability analysis and mitigation

IBM Security Guardium 12.0 could allow a privileged user to perform unauthorized actions that could lead to a denial of service. This vulnerability was discovered and disclosed in May 2024, identified as CVE-2023-47717 with IBM X-Force ID: 271690 (IBM XForce).

The vulnerability has been assigned a CVSS 3.0 Base Score of 4.4 with the following vector: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H. The scoring indicates that the vulnerability requires local access, low attack complexity, and high privileges to exploit. No user interaction is required, and the scope is unchanged. While there are no impacts to confidentiality or integrity, the vulnerability can have a high impact on system availability (IBM Support).

The primary impact of this vulnerability is on system availability, potentially leading to a denial of service condition. The vulnerability affects the system's availability while maintaining the confidentiality and integrity of the system (IBM XForce).

The exploitability of this vulnerability is considered 'Unproven That Exploit Exists' according to the CVSS Temporal metrics. The vulnerability requires high privileges and local access to exploit, making it less accessible to potential attackers (IBM XForce).

IBM has addressed this vulnerability with an official fix. Users are advised to refer to IBM Security Bulletin 7152469 for patch and upgrade information. The fix is available through IBM Fix Central for IBM Security Guardium 12.0 (IBM Support).