CVE-2023-50955
IBM InfoSphere Information Server information disclosure
Vexday Risk Score
8Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 2.4EPSS 0.6%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado
Lifecycle
21 Feb 2024Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
IBM InfoSphere Information Server 11.7 could allow an authenticated privileged user to obtain the absolute path of the web server installation which could aid in further attacks against the system. IBM X-Force ID: 275777.
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
Affected products
IBM · InfoSphere Information ServerWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →