IBM InfoSphere Information Server 11.7 could allow an authenticated privileged user to obtain the absolute path of the web server installation which could aid in further attacks against the system. IBM X-Force ID: 275777.
References
| Link | Resource |
|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilities/275777 | VDB Entry |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/275777 | VDB Entry |
| https://www.ibm.com/support/pages/node/7116610 | Vendor Advisory |
| https://www.ibm.com/support/pages/node/7116610 | Vendor Advisory |
Configurations
History
10 Dec 2024, 19:26
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Ibm
Ibm infosphere Information Server |
|
| CPE | cpe:2.3:a:ibm:infosphere_information_server:11.7:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 2.7 |
| References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/275777 - VDB Entry | |
| References | () https://www.ibm.com/support/pages/node/7116610 - Vendor Advisory | |
| CWE | CWE-22 |
21 Feb 2024, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-02-21 15:15
Updated : 2024-12-10 19:26
NVD link : CVE-2023-50955
Mitre link : CVE-2023-50955
JSON object : View
Products Affected
ibm
- infosphere_information_server
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')