Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM InfoSphere Information Server ausnutzen, um Sicherheitsvorkehrungen zu umgehen und Informationen offenzulegen.
Product
IBM InfoSphere Information Server ist eine Softwareplattform zur Integration heterogener Daten.
Vulnerabilities 2
-
Medium 5.3
IBM InfoSphere Information Server cross-site request forgery
IBM InfoSphere Information Server 11.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 245400.
-
Medium 5.3
IBM InfoSphere Information Server information disclosure
IBM InfoSphere Information Systems 11.7 could expose information about the host system and environment configuration. IBM X-Force ID: 246332.
Revision history
-
#1
Initiale Fassung
References
-
IBM Security Bulletin vom 2023-05-22
http://www.ibm.com/support/pages/node/6988615
-
IBM Security Bulletin vom 2023-05-22
https://www.ibm.com/support/pages/node/6988169