Medium · 4.3 CVE-2023-35898 EUVD-2023-39890GHSA-4f6w-wg6v-cghx

IBM InfoSphere Information Server information disclosure

Published Jul 19, 2023 · Updated Oct 21, 2024 · Assigned by ibm

Vendor: IBM Product: InfoSphere Information Server

Description

IBM InfoSphere Information Server 11.7 could allow an authenticated user to obtain sensitive information due to an insecure security configuration in InfoSphere Data Flow Designer. IBM X-Force ID: 259352.

Affected products

Vendor	Product	Affected	Fixed
IBM	InfoSphere Information Server	11.7	—

Advisories 1

WID-SEC-2023-1769 IBM InfoSphere Information Server: Schwachstelle ermöglicht Offenlegung von Informationen BSI CERT-Bund (WID) · Jul 17, 2023

References

https://www.ibm.com/support/pages/node/7009205 vendor-advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/259352 vdb-entry