CVE-2023-35898 - IBM InfoSphere Information Server information disclosure

Back Back to CVE browser

MEDIUM

IBM InfoSphere Information Server information disclosure

Published Jul 19, 2023

6.5

MEDIUM

CVSS 3.1

EPSS 0.54%

Description

IBM InfoSphere Information Server 11.7 could allow an authenticated user to obtain sensitive information due to an insecure security configuration in InfoSphere Data Flow Designer. IBM X-Force ID: 259352.

Affected products

Vendor IBM Product InfoSphere Information Server Default
unaffected
- Version
  11.7
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

IBM

InfoSphere Information Server

unaffected

Version	Status	Constraints
11.7	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-200

Exposure of Sensitive Information

References (2)

https://exchange.xforce.ibmcloud.com/vulnerabilities/259352
vdb-entryVDB EntryVendor Advisory
https://www.ibm.com/support/pages/node/7009205
vendor-advisoryPatchVendor Advisory

Link	Providers	Tags
https://exchange.xforce.ibmcloud.com/vulnerabilities/259352		vdb-entryVDB EntryVendor Advisory
https://www.ibm.com/support/pages/node/7009205		vendor-advisoryPatchVendor Advisory