Skip to content
OpenAdvisories
Medium WID-SEC-2023-0331 1 CVE

IBM InfoSphere Information Server: Schwachstelle ermöglicht Offenlegung von Informationen

Published Feb 12, 2023 · Updated Feb 12, 2023 · de-DE

Vendor: IBM Product: InfoSphere Information Server Product: InfoSphere Information Server < 11.7.1.0 Product: InfoSphere Information Server 11.7.1.4 Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in IBM InfoSphere Information Server ausnutzen, um Informationen offenzulegen.

Product

IBM InfoSphere Information Server ist eine Softwareplattform zur Integration heterogener Daten.

Vulnerabilities 1

  • High 7.5
    CVE-2023-24960

    IBM InfoSphere Information Server information disclosure

    IBM InfoSphere Information Server 11.7 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 246…

    IBM InfoSphere Information Server

Revision history

  1. #1

    Initiale Fassung

References