Improper access control

IBM InfoSphere Information Server 9.1, 11.3, 11.5, and 11.7 could allow a user to escalate their privileges to administrator due to improper access controls. IBM X-Force ID: 126526...

CVE-2018-1454

Affected product : IBM InfoSphere Information Server (versions 11.3, 11.5, 11.7). Vulnerability : Information disclosure caused by failure to properly enable HTTP Strict Transport Security (HSTS). This enables a remote attacker to obtain sensitive information via man‑in‑the‑middle techniques. Roo...

CVE-2018-1432

CVE-2018-1432 affects IBM InfoSphere Information Server 9.1, 11.3, 11.5, and 11.7. The issue is cross-frame scripting that allows loading Information Server components inside an HTML iframe on a malicious page, enabling a potential clickjacking/ phishing scenario. The provided documents do not sp...

CVE-2017-1350

IBM InfoSphere Information Server is affected by CVE-2017-1350, a privilege escalation due to improper access controls in versions 9.1, 11.3, 11.5, and 11.7 (including InfoSphere Framework and InfoSphere on Cloud). The IBM security bulletin (BB7F1678...) states an attacker could escalate to admin...

CVE-2018-1432

IBM InfoSphere Information Server 9.1, 11.3, 11.5, and 11.7 is vulnerable to cross-frame scripting which is a vulnerability that allows an attacker to load Information Server components inside an HTML iframe tag on a malicious page. The attacker could use this weakness to devise a Clickjacking...

CVE-2017-1350

IBM InfoSphere Information Server 9.1, 11.3, 11.5, and 11.7 could allow a user to escalate their privileges to administrator due to improper access controls. IBM X-Force ID: 126526...

CVE-2018-1454

IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle...

CVE-2018-1454: Cleartext Transmission of Sensitive Information

IBM InfoSphere Information Server 11.3, 11.5, and 11.7 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle...

PT-2018-5586

Name of the Vulnerable Software and Affected Versions: IBM InfoSphere Information Server versions 9.1, 11.3, 11.5, and 11.7 Description: The issue is related to improper access controls, which could allow a user to escalate their privileges to administrator. Recommendations: For IBM InfoSphere...

IBM InfoSphere Information Server Cross-Frame Scripting Vulnerability

IBM InfoSphere Information Server is a data integration platform that includes a range of products that enable you to understand, cleanse, monitor, transform, and transfer data, as well as collaborate to bridge the gap between business and IT. A cross-framework scripting vulnerability exists in I...

CVE-2017-1350: Undefined Security Weakness

IBM InfoSphere Information Server 9.1, 11.3, 11.5, and 11.7 could allow a user to escalate their privileges to administrator due to improper access controls. IBM X-Force ID: 126526...

CVE-2018-1432: Cross-Site Request Forgery (CSRF)

IBM InfoSphere Information Server 9.1, 11.3, 11.5, and 11.7 is vulnerable to cross-frame scripting which is a vulnerability that allows an attacker to load Information Server components inside an HTML iframe tag on a malicious page. The attacker could use this weakness to devise a Clickjacking...

PT-2018-12437

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server versions 9.1, 11.3, 11.5, 11.7 Description The issue allows an attacker to load Information Server components inside an HTML iframe tag on a malicious page, enabling Clickjacking attacks for phishing, frame...

PT-2018-12571

Name of the Vulnerable Software and Affected Versions IBM InfoSphere Information Server versions 11.3, 11.5, and 11.7 Description The issue is caused by the failure to properly enable HTTP Strict Transport Security, allowing a remote attacker to obtain sensitive information. An attacker could...

IBM InfoSphere BigInsights Information Disclosure Vulnerability

IBM InfoSphere BigInsights is a suite of software platforms for storing and analyzing "Big Data" from IBM in the United States. The platform provides solutions for managing and analyzing massive amounts of structured and unstructured data. A security vulnerability exists in IBM InfoSphere...

CVE-2014-4782

IBM InfoSphere BigInsights 2.1.2 allows remote authenticated users to discover SMTP server credentials via vectors related to the Alert management service. IBM X-Force ID: 95029...

CVE-2014-4782

CVE-2014-4782 affects IBM InfoSphere BigInsights 2.1.2 (and linked alerts module exposure). The vulnerability allows remote authenticated users to obtain SMTP server credentials in clear text via the Alert management service. IBM’s security bulletin confirms the issue alongside CVE-2014-4781, wit...

CVE-2014-4782

IBM InfoSphere BigInsights 2.1.2 allows remote authenticated users to discover SMTP server credentials via vectors related to the Alert management service. IBM X-Force ID: 95029...

PT-2018-4225

Name of the Vulnerable Software and Affected Versions IBM InfoSphere BigInsights version 2.1.2 Description The issue allows remote authenticated users to discover SMTP server credentials through vectors related to the Alert management service. Recommendations For IBM InfoSphere BigInsights versio...

CVE-2014-4782: Exposure of Sensitive Information to an Unauthorized Actor

IBM InfoSphere BigInsights 2.1.2 allows remote authenticated users to discover SMTP server credentials via vectors related to the Alert management service. IBM X-Force ID: 95029...