Skip to content
OpenAdvisories
Medium WID-SEC-2024-1758 2 CVEs

IBM InfoSphere Information Server: Mehrere Schwachstellen

Published Aug 5, 2024 · Updated Aug 5, 2024 · de-DE

Vendor: IBM Product: InfoSphere Information Server Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM InfoSphere Information Server ausnutzen, um einen Denial of Service Angriff durchzuführen und vertrauliche Informationen offenzulegen.

Product

IBM InfoSphere Information Server ist eine Softwareplattform zur Integration heterogener Daten.

Vulnerabilities 2

  • High 7.5
    CVE-2023-52428

    Denial of Service in Connect2id Nimbus JOSE+JWT

    In Connect2id Nimbus JOSE+JWT before 9.37.2, an attacker can cause a denial of service (resource consumption) via a large JWE p2c header value (aka iteration count) for the PasswordBasedDecrypter (PBKDF2) component.

    druid thingsboard-tb-node thingsboard-tb-mqtt-transport tez Wolfi Maven
  • Medium 4.3
    CVE-2024-39751

    IBM InfoSphere Information Server information disclosure

    IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 2974…

    IBM InfoSphere Information Server

Revision history

  1. #1

    Initiale Fassung

References