CVE-2023-27290

CVE-2023-27290 : Docker-based datastores for IBM Observability with Instana do not require authentication, enabling network-accessible read/write access. Affects IBM Observability with Instana versions 239-0..239-4, 241-0..241-5, 243-0..243-6, and 245-0..245-2. CVSSv3.1 base score 9.1 (CRITICAL) ...

CVE-2023-37404

Summary: CVE-2023-37404 affects IBM Observability with Instana OnPrem versions 1.0.243–1.0.254. A network attacker can exploit DNS poisoning to execute arbitrary code on the host. The NVD/IBM bulletin report a high-severity impact with a base CVSS v3.1 score up to 9.8 (CRITICAL). Remediation guid...