Description
IBM Content Navigator 3.0.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4, 3.0.5, 3.0.6, 3.0.7, 3.0.8, 3.0.9, 3.0.10, 3.0.11, and 3.0.12 is vulnerable to missing authorization and could allow an authenticated user to load external plugins and execute code. IBM X-Force ID: 238805.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| IBM | Content Navigator | 3.0.0, 3.0.1, 3.0.2, 3.0.3, 3.0.4, 3.0.5, 3.0.6, 3.0.7, 3.0.8, 3.0.9, 3.0.10, 3.0.11, 3.0.12 | — |
Advisories 1
- WID-SEC-2023-0741 IBM Business Automation Workflow: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 23, 2023
References
- https://www.ibm.com/support/pages/node/6844453 vendor-advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/238805 vdb-entry