Lucene search

IbmCVE-2023-50955

HistoryFeb 21, 2024 - 3:15 p.m.

CVE-2023-50955

2024-02-2115:15:08

CWE-36

ibm

web.nvd.nist.gov

ibm

infosphere

information server

11.7

authenticated user

web server

security vulnerability

nvd

cve-2023-50955

CVSS3

2.4

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

AI Score

3.5

Confidence

Low

EPSS

Percentile

9.0%

JSON

IBM InfoSphere Information Server 11.7 could allow an authenticated privileged user to obtain the absolute path of the web server installation which could aid in further attacks against the system. IBM X-Force ID: 275777.

Affected configurations

Vulners

Node

ibminfosphere_information_serverMatch11.7

VendorProductVersionCPE
ibminfosphere_information_server11.7cpe:2.3:a:ibm:infosphere_information_server:11.7:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	infosphere_information_server	11.7	cpe:2.3:a:ibm:infosphere_information_server:11.7:::::::*

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "InfoSphere Information Server",
    "vendor": "IBM",
    "versions": [
      {
        "status": "affected",
        "version": "11.7"
      }
    ]
  }
]

References

exchange.xforce.ibmcloud.com/vulnerabilities/275777

www.ibm.com/support/pages/node/7116610

CVSS3

2.4

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

AI Score

3.5

Confidence

Low

EPSS

Percentile

9.0%

JSON

Related for CVE-2023-50955