Skip to content
OpenAdvisories
Medium WID-SEC-2023-1287 1 CVE

IBM InfoSphere Information Server: Schwachstelle ermöglicht Codeausführung

Published May 23, 2023 · Updated May 23, 2023 · de-DE

Vendor: IBM Product: InfoSphere Information Server 11.7 Platform: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in IBM InfoSphere Information Server ausnutzen, um beliebigen Programmcode auszuführen.

Product

IBM InfoSphere Information Server ist eine Softwareplattform zur Integration heterogener Daten.

Vulnerabilities 1

  • Medium 6.5
    CVE-2023-22887

    Apache Airflow path traversal by authenticated user

    Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an attacker to perform unauthorized file access outside the intended directory structure by manipulating the run_id parameter. This vulnerability is considered low since it requ…

    Apache Software Foundation Apache Airflow apache-airflow PyPI

Revision history

  1. #1

    Initiale Fassung

References