CVE-2023-38268

2023-12-0120:15:07

CWE-352

[email protected]

web.nvd.nist.gov

ibm

infosphere

csrf

vulnerability

attacker

unauthorized actions

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

21.8%

JSON

IBM InfoSphere Information Server 11.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 260585.

Affected configurations

Nvd

Node

ibminfosphere_information_serverRange11.7.0.0–11.7.1.0

ibminfosphere_information_serverRange11.7.0.0–11.7.1.4on_cloud

AND

ibmaixMatch-

linuxlinux_kernelMatch-

microsoftwindowsMatch-

VendorProductVersionCPE
ibminfosphere_information_server*cpe:2.3:a:ibm:infosphere_information_server:*:*:*:*:*:*:*:*
ibminfosphere_information_server*cpe:2.3:a:ibm:infosphere_information_server:*:*:*:*:on_cloud:*:*:*
ibmaix-cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:*
linuxlinux_kernel-cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*
microsoftwindows-cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	infosphere_information_server	*	cpe:2.3:a:ibm:infosphere_information_server::::::::
ibm	infosphere_information_server	*	cpe:2.3:a:ibm:infosphere_information_server:::::on_cloud:::*
ibm	aix	-	cpe:2.3:o:ibm:aix:-:::::::*
linux	linux_kernel	-	cpe:2.3:o:linux:linux_kernel:-:::::::*
microsoft	windows	-	cpe:2.3:o:microsoft:windows:-:::::::*