CVE-2023-35898: Exposure of Sensitive Information to an Unauthorized Actor

IBM InfoSphere Information Server 11.7 could allow an authenticated user to obtain sensitive information due to an insecure security configuration in InfoSphere Data Flow Designer. IBM X-Force ID: 259352...

CVE-2021-29737

IBM InfoSphere Data Flow Designer Engine IBM InfoSphere Information Server 11.7 component has improper validation of the REST API server certificate. IBM X-Force ID: 201301...

CVE-2021-29738

The CVE-2021-29738 issue affects IBM InfoSphere DataStage Flow Designer (InfoSphere Information Server 11.7), where a server-side request forgery (SSRF) vulnerability can allow an authenticated attacker to issue unauthorized requests from the system, potentially enabling network enumeration or re...

CVE-2021-29738: Server-Side Request Forgery (SSRF)

IBM InfoSphere Data Flow Designer IBM InfoSphere Information Server 11.7 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force...

CVE-2021-29737: Improper Certificate Validation

IBM InfoSphere Data Flow Designer Engine IBM InfoSphere Information Server 11.7 component has improper validation of the REST API server certificate. IBM X-Force ID: 201301...