Summary
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in IBM InfoSphere Information Server ausnutzen, um Informationen offenzulegen und um einen Denial-of-Service-Zustand zu erzeugen.
Product
IBM InfoSphere Information Server ist eine Softwareplattform zur Integration heterogener Daten.
Vulnerabilities 2
-
Medium 6.5
IBM InfoSphere Information Server denial of service
IBM InfoSphere Information Server could allow an authenticated user to consume file space resources due to unrestricted file uploads. IBM X-Force ID: 298279.
-
Medium 4.9
IBM InfoSphere Information Server information disclosure
IBM InfoSphere Information Server 11.7 could allow a privileged user to obtain sensitive information from authentication request headers. IBM X-Force ID: 298277.
Revision history
-
#1
Initiale Fassung
References
-
IBM Security Bulletin vom 2024-08-15
https://www.ibm.com/support/pages/node/7160853
-
IBM Security Bulletin vom 2024-08-15
https://www.ibm.com/support/pages/node/7160855