Security Bulletin: Docker based datastores for IBM Instana do not currently require authentication

Summary Docker based datastores for IBM Instana do not currently require authentication. Due to this, an attacker with network or system access to the datastores could interrogate the datastores with read/write privileges CVE-2023-27290. Vulnerability Details CVEID:CVE-2023-27290 DESCRIPTION:...

CVE-2023-27290: Missing Authentication for Critical Function

Docker based datastores for IBM Instana IBM Observability with Instana 239-0 through 239-2, 241-0 through 241-2, and 243-0 do not currently require authentication. Due to this, an attacker within the network could access the datastores with read/write access. IBM X-Force ID: 248737...

PT-2023-2248

Name of the Vulnerable Software and Affected Versions IBM Instana IBM Observability with Instana versions 239-0 through 239-2 IBM Instana IBM Observability with Instana versions 241-0 through 241-2 IBM Instana IBM Observability with Instana version 243-0 Description The issue is related to...