Absolute Path Traversal in IBM InfoSphere Information Server - CVE-2023-50955
Published: February 22, 2024
Vulnerability identifier: #VU86705
CSH Severity: Low
CVSS v4: 4.8 [CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2023-50955
CWE-ID: CWE-36
Exploitation vector: Adjecent network
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows an adjacent privileged user to gain access to potentially sensitive information.
The vulnerability exists due to excessive data output by the application. An adjacent privileged user can gain unauthorized access to sensitive information on the system.
Affected software
IBM InfoSphere Information Server
How to mitigate CVE-2023-50955
Install updates from vendor's website.
IBM InfoSphere Information Server - update to 11.7.1.4 Service pack 2