2037 matches found
CVE-2024-37533
IBM InfoSphere Information Server 11.7 could disclose sensitive user information to another user with physical access to the machine. IBM X-Force ID: 294727...
CVE-2024-37533
The CVE-2024-37533 issue affects IBM InfoSphere Information Server 11.7. It enables disclosure of sensitive user information to another user with physical access to the machine. The issue is addressed in IBM’s Security Bulletin, which lists remediation steps: upgrade to IBM InfoSphere Information...
PT-2024-27632 · Ibm · Ibm Infosphere Information Server
Name of the Vulnerable Software and Affected Versions: IBM InfoSphere Information Server version 11.7 Description: The issue could disclose sensitive user information to another user with physical access to the machine. Recommendations: For IBM InfoSphere Information Server version 11.7, at the...
CVE-2024-37533: Exposure of Private Personal Information to an Unauthorized Actor
IBM InfoSphere Information Server 11.7 could disclose sensitive user information to another user with physical access to the machine. IBM X-Force ID: 294727...
IBM InfoSphere Information Server 安全漏洞
IBM InfoSphere Information Server is a set of data integration platforms from International Business Machines IBM. The platform can be used to integrate data information obtained from various sources. A security vulnerability exists in IBM InfoSphere Information Server version 11.7 that stems fro...
Security Bulletin: IBM InfoSphere Information Server is affected by an information disclosure vulnerability (CVE-2024-37533)
Summary An information disclosure vulnerability in InfoSphere Information Server was addressed. Vulnerability Details CVEID:CVE-2024-37533 DESCRIPTION: IBM InfoSphere Information Server could disclose sensitive user information to another user with physical access to the machine. CVSS Base score:...
Security Bulletin: IBM Information Governance Catalog is vulnerable to unrestricted file upload (CVE-2024-40705)
Summary An unrestricted file upload vulnerability in Information Governance Catalog was addressed. Vulnerability Details CVEID:CVE-2024-40705 DESCRIPTION: IBM Information Governance Catalog could allow an authenticated user to consume file space resources due to unrestricted file uploads. CVSS Ba...
Security Bulletin: IBM DataStage Flow Designer is vulnerable to information disclosure (CVE-2024-40704)
Summary An information disclosure vulnerability in DataStage Flow Designer was addressed. Vulnerability Details CVEID:CVE-2024-40704 DESCRIPTION: IBM DataStage Flow Designer could allow a privileged user to obtain sensitive information from authentication request headers. CVSS Base score: 4.9 CVS...
IBM InfoSphere Information Server Auth Bypass
The vulnerability of the IBM InfoSphere Information Server software platform stems from deficiencies in the authentication process. Exploiting this vulnerability could allow attackers to modify arbitrary projects...
IBM InfoSphere Information Server Account Disclosure
The vulnerability in the web interface of the IBM InfoSphere Information Server software integration platform exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability can allow a malicious actor to disclose credentials during a secure sessio...
IBM InfoSphere Information Server Information Disclosure
The vulnerability of the IBM InfoSphere Information Server software platform is related to the leakage of information in error messages. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
IBM InfoSphere Information Server Unauthorized Access
The vulnerability of the IBM InfoSphere Information Server software platform is related to deficiencies in the error reporting mechanism. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
IBM InfoSphere Information Server XSS
The vulnerability of the IBM InfoSphere Information Server data integration software platform exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out a cross-site scripting attack remotely...
IBM InfoSphere Information Server Account Disclosure
The vulnerability in the web interface of the IBM InfoSphere Information Server software integration platform exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability can allow a malicious actor to disclose credentials during a secure sessio...
IBM InfoSphere Information Server CSRF
The vulnerability of the IBM InfoSphere Information Server software integration platform is related to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to execute a CSRF attack remotely...
IBM InfoSphere Information Server Account Disclosure
The vulnerability in the web interface of the IBM InfoSphere Information Server software integration platform exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability can allow a malicious actor to disclose credentials during a secure sessio...
IBM InfoSphere Information Server Information Disclosure
The vulnerability of the IBM InfoSphere Information Server software platform relates to the disclosure of information through query strings. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
IBM InfoSphere Information Server SSRF
The vulnerability of the IBM InfoSphere Information Server software integration platform is related to insufficient testing of incoming requests. Exploiting this vulnerability could allow a malicious actor to execute an SSRF attack remotely...
IBM InfoSphere Information Server Auth Bypass Information Disclosure
The vulnerability of the IBM InfoSphere Information Server software platform is related to an error in the processing of authentication keys controlled by users. Exploiting this vulnerability could allow a malicious actor to disclose protected information or alter arbitrary data...
IBM InfoSphere Information Server Account Disclosure
The vulnerability in the web interface of the IBM InfoSphere Information Server software integration platform exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability can allow a malicious actor to disclose credentials during a secure sessio...