Summary
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in IBM InfoSphere Information Server ausnutzen, um Informationen offenzulegen oder einen Denial-of-Service-Zustand zu erzeugen.
Product
IBM InfoSphere Information Server ist eine Softwareplattform zur Integration heterogener Daten.
Vulnerabilities 2
-
Medium 6.5
IBM InfoSphere Information Server denial of service
IBM InfoSphere Information Server 11.7 could allow an authenticated user to GUI to not load or stop working due to improper input validation.
-
Medium 4.3
IBM InfoSphere Information Server information disclosure
IBM InfoSphere Information Server 11.7 could allow an authenticated user to obtain sensitive information when a detailed technical error message is returned in a stack trace. This information could be used in further attacks against the system.
Revision history
-
#1
Initiale Fassung
References
-
IBM Security Bulletin vom 2024-12-05
https://www.ibm.com/support/pages/node/7177698
-
IBM Security Bulletin vom 2024-12-05
https://www.ibm.com/support/pages/node/7177700