PT-2021-18440

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Data Flow Designer IBM InfoSphere Information Server 11.7 Description The issue is related to server-side request forgery SSRF, which may allow an authenticated attacker to send unauthorized requests from the system. This could...

CVE-2021-29738: Server-Side Request Forgery (SSRF)

IBM InfoSphere Data Flow Designer IBM InfoSphere Information Server 11.7 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force...

CVE-2021-29737: Improper Certificate Validation

IBM InfoSphere Data Flow Designer Engine IBM InfoSphere Information Server 11.7 component has improper validation of the REST API server certificate. IBM X-Force ID: 201301...