Main Vulnerability Database Vulnerabilities #VU64916

Improper access control in IBM InfoSphere Information Server - CVE-2022-22373

Published: July 5, 2022

Vulnerability identifier: #VU64916

CSH Severity: Low

CVSS v4: 5.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-22373

CWE-ID: CWE-284

Exploitation vector: Remote access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote user to gain unauthorized access to otherwise restricted functionality.

The vulnerability exists due to the possible creation of directories and files on the server file system that may contain non-sensitive debugging information like stack traces. A remote user can bypass implemented security restrictions and gain unauthorized access to the application.

Affected software

IBM InfoSphere Information Server
IBM InfoSphere Information Server for Cloud

How to mitigate CVE-2022-22373

Install updates from vendor's website.

External References

Related Security Bulletins