3406 matches found
CVE-2021-29738
The CVE-2021-29738 issue affects IBM InfoSphere DataStage Flow Designer (InfoSphere Information Server 11.7), where a server-side request forgery (SSRF) vulnerability can allow an authenticated attacker to issue unauthorized requests from the system, potentially enabling network enumeration or re...
CVE-2021-29738
IBM InfoSphere Data Flow Designer IBM InfoSphere Information Server 11.7 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force...
CVE-2021-29737
IBM InfoSphere Data Flow Designer Engine IBM InfoSphere Information Server 11.7 component has improper validation of the REST API server certificate. IBM X-Force ID: 201301...
CVE-2021-29737
The CVE-2021-29737 entry relates to IBM InfoSphere Data Flow Designer Engine within IBM InfoSphere Information Server 11.7, which is affected by improper validation of the REST API server certificate. The IBM Security Bulletin and NVD entry confirm the affected component and describe a REST certi...
CVE-2021-29737: Improper Certificate Validation
IBM InfoSphere Data Flow Designer Engine IBM InfoSphere Information Server 11.7 component has improper validation of the REST API server certificate. IBM X-Force ID: 201301...
PT-2021-18440
Name of the Vulnerable Software and Affected Versions IBM InfoSphere Data Flow Designer IBM InfoSphere Information Server 11.7 Description The issue is related to server-side request forgery SSRF, which may allow an authenticated attacker to send unauthorized requests from the system. This could...
CVE-2021-29738: Server-Side Request Forgery (SSRF)
IBM InfoSphere Data Flow Designer IBM InfoSphere Information Server 11.7 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force...
IBM InfoSphere DataStage Flow Designer Code Issue Vulnerability
Ibm InfoSphere DataStage Flow Designer is a Web-based data stage flow designer from Ibm, Inc. A security vulnerability exists in IBM InfoSphere that allows an authenticated attacker to exploit the vulnerability to send unauthorized requests from the system, potentially resulting in network...
PT-2021-18439
Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server version 11.7 Description The issue is related to improper validation of the REST API server certificate in the IBM InfoSphere Data Flow Designer Engine component. This could potentially allow for...
IBM InfoSphere DataStage Flow Designer Trust Management Issue Vulnerability
Ibm InfoSphere DataStage Flow Designer is a Web-based data stage flow designer from Ibm, Inc. A security vulnerability exists in Ibm InfoSphere DataStage Flow Designer that stems from an error in the validation of REST API server credentials by the IBM InfoSphere DataStage Flow Designer engine...
IBM InfoSphere DataStage Flow Designer 代码问题漏洞
Ibm InfoSphere DataStage Flow Designer is a Web-based data stage flow designer from Ibm, Inc. A security vulnerability exists in IBM InfoSphere that allows an authenticated attacker to exploit the vulnerability to send unauthorized requests from the system, potentially resulting in network...
CVE-2021-29737
IBM InfoSphere Data Flow Designer Engine IBM InfoSphere Information Server 11.7 component has improper validation of the REST API server certificate. IBM X-Force ID: 201301...
CVE-2021-29738
IBM InfoSphere Data Flow Designer IBM InfoSphere Information Server 11.7 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force...
IBM InfoSphere DataStage Flow Designer 信任管理问题漏洞
Ibm InfoSphere DataStage Flow Designer is a Web-based data stage flow designer from Ibm, Inc. A security vulnerability exists in Ibm InfoSphere DataStage Flow Designer that stems from an error in the validation of REST API server credentials by the IBM InfoSphere DataStage Flow Designer engine...
Security Bulletin: IBM App Connect Enterprise Certified Container Designers may be vulnerable to arbitrary code execution via CVE-2021-3757
Summary IBM App Connect Enterprise Certified Container may be vulnerable to arbitrary code execution via CVE-2021-3757. This only affects App Connect Designers Vulnerability Details CVEID: CVE-2021-3757 DESCRIPTION: Node.js immer module could allow a remote attacker to execute arbitrary code on t...
Security Bulletin: IBM App Connect Enterprise Certified Container could disclose sensitive information to a local user when it is configured to use an IBM Cloud API key to connect to cloud-based connectors (CVE-2021-29906)
Summary IBM App Connect Enterprise may include the hash of an IBM Cloud API key that is used by an Integration Server in the Pod definition of that Integration Server. This is only present if the Integration Server is configured to communicate with the cloud-based connectors in a cloud instance o...
GHSA-6Q3P-36F4-CWXV Server-Side Request Forgery in UReport
UReport v2.2.9 contains a Server-Side Request Forgery SSRF in the designer page which allows attackers to detect intranet device ports...
UReport Arbitrary Code Execution Vulnerability
UReport is a high-performance pure Java reporting engine based on the Spring architecture. The vulnerability stems from a lack of access control to the designer page. An attacker can exploit this vulnerability to execute arbitrary code...
UReport Server-Side Request Forgery Vulnerability
UReport is a high-performance pure Java reporting engine based on the Spring architecture. a server-side request forgery vulnerability exists in the designer page of UReport version 2.2.9. An attacker can use this vulnerability to detect intranet device ports...
