Lucene search

K
nvd[email protected]NVD:CVE-2023-50955
HistoryFeb 21, 2024 - 3:15 p.m.

CVE-2023-50955

2024-02-2115:15:08
CWE-36
web.nvd.nist.gov
3
ibm
infosphere
privilege escalation
risk
x-force id 275777

CVSS3

2.4

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

AI Score

3.1

Confidence

High

EPSS

0

Percentile

9.0%

IBM InfoSphere Information Server 11.7 could allow an authenticated privileged user to obtain the absolute path of the web server installation which could aid in further attacks against the system. IBM X-Force ID: 275777.

CVSS3

2.4

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

AI Score

3.1

Confidence

High

EPSS

0

Percentile

9.0%

Related for NVD:CVE-2023-50955