Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ibmIBM974F3226BE4C5408D2C2E0CBD5B831F97486EBDE1FBD72A9F8C1A156EAF87CE3
HistoryJul 17, 2023 - 3:24 a.m.

Security Bulletin: IBM InfoSphere Information Server is affected by an information disclosure vulnerability (CVE-2023-35898)

2023-07-1703:24:01
www.ibm.com
6
ibm infosphere
information server
datastage flow designer
vulnerability
information disclosure
cve-2023-35898
security configuration
version 11.7.1.0
version 11.7.1.4
service pack 1
security patch

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

0.0005 Low

EPSS

Percentile

19.1%

JSON

Summary

DataStage Flow Designer is an internal component of IBM InfoSphere Information Server. An information disclosure vulnerability in the DataStage Flow Designer was addressed.

Vulnerability Details

CVEID:CVE-2023-35898
**DESCRIPTION:**IBM InfoSphere Information Server could allow an authenticated user to obtain sensitive information due to an insecure security configuration in InfoSphere Data Flow Designer.
CVSS Base score: 4.3
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/259352 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)

Affected Products and Versions

Affected Product(s) Version(s)
InfoSphere Information Server 11.7

Remediation/Fixes

Product VRMF APAR Remediation
InfoSphere Information Server, InfoSphere Information Server on Cloud 11.7 DT222632 --Apply IBM InfoSphere Information Server version 11.7.1.0
--Apply InfoSphere Information Server version 11.7.1.4
--Apply InfoSphere Information Server 11.7.1.4 Service pack 1
--Apply Information Server DataStage Flow Designer security patch

Workarounds and Mitigations

None

Affected configurations

Vulners
Node
ibminfosphere_information_serverMatch11.7

Related

cve 1
nvd 1
prion 1
cnvd 1
cvelist 1
cve
cve
CVE-2023-35898
2023-07-19 01:15:10
nvd
nvd
CVE-2023-35898
2023-07-19 01:15:10
prion
prion
Security feature bypass
2023-07-19 01:15:00
cnvd
cnvd
IBM InfoSphere Information Server Information Disclosure Vulnerability (CNVD-2023-68779)
2023-08-11 00:00:00
cvelist
cvelist
CVE-2023-35898 IBM InfoSphere Information Server information disclosure
2023-07-19 00:46:41

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

0.0005 Low

EPSS

Percentile

19.1%

JSON
Related for 974F3226BE4C5408D2C2E0CBD5B831F97486EBDE1FBD72A9F8C1A156EAF87CE3
cve1nvd1prion1cnvd1cvelist1